epm installation guide en

BusinessObjects™ XI R2 11.20 EPM Performance Suite Profitability Installation Guide

BusinessObjects XI R2 11.20

Windows

Patents Business Objects owns the following U.S. patents, which may cover products that are offered and sold by Business Objects: 5,555,403, 6,247,008 B1, 6,578,027 B2, 6,490,593 and 6,289,352.

Trademarks Business Objects, the Business Objects logo, Crystal Reports, and Crystal Enterprise are trademarks or registered trademarks of Business Objects SA or its affiliated companies in the United States and other countries. All other names mentioned herein may be trademarks of their respective owners.

Copyright Copyright © 2007 Business Objects. All rights reserved.

Third-party Contributors

Business Objects products in this release may contain redistributions of software licensed from third-party contributors. Some of these individual components may also be available under alternative licenses. A partial listing of third-party contributors that have requested or permitted acknowledgments, as well as required notices, can be found at: http://www.businessobjects.com/thirdparty

http://www.businessobjects.com/thirdparty

Contents Chapter 1 Introduction ..........................................................................................................5

1.1 Introducing EPM Profitability ..........................................................................61.2 What is EPM Profitability?..............................................................................6

1.2.1 Purpose of this document ....................................................................61.2.2 Document Audience.............................................................................6

Chapter 2 System Architecture .............................................................................................72.1 EPM Architecture...........................................................................................82.2 Integration considerations..............................................................................8

2.2.1 Database Platforms .............................................................................82.2.2 Operating Systems ..............................................................................82.2.3 Supported Networks ............................................................................9

2.3 System Components .....................................................................................92.3.1 Database Server..................................................................................92.3.2 Primary Server.....................................................................................92.3.3 Model Servers .....................................................................................92.3.4 Web Servers........................................................................................92.3.5 Client applications..............................................................................102.3.6 Web Client and Book Viewer..............................................................102.3.7 Utilities...............................................................................................10

Chapter 3 Preparation.........................................................................................................133.1 Before you start ...........................................................................................143.2 EPM Suite Requirements.............................................................................14

3.2.1 Minimum specifications......................................................................143.2.2 Settings that can impact EPM ............................................................14

3.3 Pre-Requisites.............................................................................................153.3.1 Model Server Pre-Requisites .............................................................153.3.2 Client and Web Server Pre-Requisites ...............................................163.3.3 Database Server Settings ..................................................................16

3.4 Topology .....................................................................................................163.4.1 Resource Considerations...................................................................163.4.2 Three-Tier Architecture ......................................................................173.4.3 Stand-Alone Setup.............................................................................173.4.4 Remote Connection Software ............................................................183.4.5 Account Information and Connectivity ................................................183.4.6 Database Maintenance Plans ............................................................20

3.5 Licensing in EPM.........................................................................................203.6 Defining a roll-back position.........................................................................203.7 Staff Involvement.........................................................................................20

3.7.1 Database Administrator......................................................................213.7.2 IT Staff...............................................................................................213.7.3 Project Sponsor .................................................................................213.7.4 EPM Administrator.............................................................................21

3.8 Pre-Installation Checklist .............................................................................21

Chapter 4 EPM Installation .................................................................................................234.1 Initial Steps..................................................................................................244.2 Installation Type ..........................................................................................24

4.2.1 New installation .................................................................................244.2.2 Upgrade ............................................................................................254.2.3 Expansion..........................................................................................25

BusinessObjects Profitability Installation Guide 1

Contents

4.3 Order of installation......................................................................................264.4 Database Server application installation.......................................................274.5 Database Schema installation......................................................................274.6 EPM Model Server Installation Process .......................................................27

4.6.1 Beginning installation.........................................................................274.6.2 Pre-Requisites Check ........................................................................274.6.3 EPM Welcome Screen.......................................................................284.6.4 Language Selection ...........................................................................284.6.5 Registration Information.....................................................................294.6.6 Component Selection.........................................................................304.6.7 Installation Destination Directory ........................................................314.6.8 Communication Transport Mechanism Selection................................324.6.9 Start Installation.................................................................................334.6.10Choose Default Language .................................................................344.6.11Installation Complete .........................................................................344.6.12EPM Book Viewer Installation ............................................................34

4.7 Web Server installation................................................................................354.7.1 Pre-Requisites Check ........................................................................354.7.2 Language Selection ...........................................................................354.7.3 Registration Information.....................................................................354.7.4 Component Selection.........................................................................354.7.5 Installation Destination Directory ........................................................364.7.6 Communication Transport Mechanism Selection................................364.7.7 Web Server Type Selection................................................................364.7.8 ASP File Location ..............................................................................374.7.9 Start Installation.................................................................................374.7.10Choose Default Language .................................................................384.7.11Installation Complete .........................................................................38

Chapter 5 EPM Configure...................................................................................................395.1 About Configuration.....................................................................................405.2 EPM Configuration Options..........................................................................40

5.2.1 Communication Transport Mechanism Selection................................425.3 EPM Server Installation Type.......................................................................42

5.3.1 DCOM Configuration..........................................................................445.4 Work Manager Installation Type...................................................................48

5.4.1 Workflow DCOM Configuration ..........................................................485.5 Work Manager Client Configuration .............................................................495.6 EPM Server Configuration ...........................................................................50

5.6.1 Database Connectivity .......................................................................515.6.2 Advanced IP Filtering.........................................................................555.6.3 EPM Model Directory Selection..........................................................585.6.4 License Key Configuration .................................................................595.6.5 Database Auditing Selection ..............................................................605.6.6 Server Component Registration .........................................................61

5.7 Work Manager Server Options.....................................................................635.8 EPM Single Sign On (SSO) .........................................................................63

5.8.1 Linking BusinessObjects Enterprise to EPM.......................................655.9 EPM Client Configuration.............................................................................66

5.9.1 EPM Client Setup ..............................................................................675.9.2 EPM Work Manager Client configuration............................................685.9.3 EPM Server Test Connection.............................................................68

5.10EPM Log Files Location...............................................................................695.11Web Server Configuration............................................................................69

5.11.1IIS Web Server Configuration.............................................................705.11.2IIS EPM Web Proxy Service Configuration.........................................725.11.3EPM Web Server Configuration .........................................................765.11.4Post Installation: IIS Configuration .....................................................77

5.12Report Manager Server Configuration..........................................................825.12.1Report Service Configuration .............................................................82

5.13Finish Screen ..............................................................................................835.14EPM Book Viewer Configuration..................................................................83


Contents

Chapter 6 DCOM and Firewall Settings with EPM ...............................................................876.1 Client Server Communication ......................................................................886.2 Configuring EPM servers and clients to communicate without DCOM ..........88

6.2.1 Server Configuration for Windows 2003 .............................................896.3 Channeling all DCOM communications through a single port .......................92

6.3.1 Client configuration for Windows 2000 ...............................................926.3.2 Server configuration for Windows 2000 ..............................................93

6.4 Firewall Configuration for EPM.....................................................................956.5 Limiting DCOM Dynamic Ports to 5000-5200 ...............................................96

Chapter 7 Checking the Installation.....................................................................................997.1 Basic Checking..........................................................................................100

Chapter 8 Removing the Software ....................................................................................1038.1 Use Remove Programs..............................................................................104

Chapter 9 Tips for a Smooth Installation............................................................................1079.1 Preparation................................................................................................1089.2 General Tips..............................................................................................1089.3 System Administration ...............................................................................1089.4 Networking Advice.....................................................................................1089.5 Web Client Deployment .............................................................................109

9.5.1 Web Download ................................................................................1099.5.2 Web Client Installer Program ...........................................................110

Chapter 10 Troubleshooting................................................................................................11310.1EPM System Information ...........................................................................11410.2EPM Error Messages.................................................................................114

10.2.1Incorrect EPM Support Version........................................................11510.2.2RPC server is unavailable................................................................11510.2.3Class Not Registered .......................................................................11510.2.4File Name doesn’t start with %PDF..................................................11610.2.5COM Surrogate Errors .....................................................................11610.2.6Connection Problems.......................................................................11610.2.7Web Client Access Problems...........................................................11710.2.8Multiple User Web Connection Problems .........................................117

Appendix A Business Objects Information Resources..........................................................119A1. Documentation and information services....................................................119A2. Documentation ..........................................................................................119A3. Customer support, consulting and training .................................................120A4. Useful addresses at a glance.....................................................................122

Index.........................................................................................................................................123


Contents


Introduction

1|Introduction Introducing EPM

1.1 Introducing EPM Profitability This document describes the installation and configuration process for the Enterprise Performance Management Profitability Suite. The introductory section is intended to give you an overview of this manual. An overview of the EPM system and configuration issues is explored in more detail in the following sections. We strongly recommend that you read through the follwing sections before you start to install your EPM Suite.

• What is EPM Profitability? • Purpose of this document • Document Audience

1.2 What is EPM Profitability? EPM Profitability is suite of applications designed to allow financial analysts, reporters and end users to create financial models of their organization, and to analyze the data in a flexible and responsive manner. The main application in the suite is a 32-bit Windows application called Performance Optimization. This has an extensive feature set that can be licensed in two other forms to support specific tasks. These use a reduced feature set to support the applications Activity Analysis and IT Sevices Costing. Ancillary programs work in conjunction with these applications to provide means for data input (Data Bridge), automated reporting (Report Manager) and workflow design (Work Manager). The main applications are based upon a ROLAP concept (Relational Online Analytical Processing), and uses a Relational Database as the primary storage mechanism for raw data. A Model (or Application) Server is connected to the database, which extracts and calculates data on demand. Remote (Web browser) or directly-linked (Book Viewer) clients can be configured to attach to the Model Server, and can view data via “books” that are “published” for public consumption. All access is governed by configurable security settings within the Performance Optimization application.

1.2.1 Purpose of this document The objective of this manual is to explain in detail how to install, re-install, configure and re-configure EPM Profitability. It explains the preparatory steps for consideration before installing, and the step-bystep procedure for installation. We also describe configuration options and their implications, and relate the tasks you may be required to perform after installation has been completed. Administration tasks both during installation and beyond are outlined, and throughout the document we have included troubleshooting advice at the relevant points of the installation and configuration processes. General troubleshooting information is provided at the end of the document for reference, as well as details of how to contact the Business Objects Helpdesk, listing the kinds of information you may be requested to provide, and where you can find it.

1.2.2 Document Audience There are several areas of your business that should take an active interest in the content of this document. These are as follows:- IT Staff : the person(s) designated as responsible for performing (or assisting in) the installation of the EPM Profitability Suite. Database Administrator : the person(s) designated as responsible for creating and maintaining EPM databases within your organization. EPM Administrator : the person designated as responsible for managing the EPM models and security settings.


System Architecture

2|System Architecture EPM Architecture

2.1 EPM Architecture The system architecture of EPM Profitability Suite is denoted in the diagram below. This also represents the general order (read from left-to-right) in which EPM components should be installed.

2.2 Integration considerations EPM is designed to run on the platforms designated in the EPM Suite System Requirements document, which gives the latest compatibility listings for operating systems, database platforms, and service packs.

2.2.1 Database Platforms EPM is designed to store its raw data in either of the two leading RDBMS platforms: a Microsoft SQL Server database, or an Oracle Tablespace. We recommend that these platforms be hosted on a dedicated database server to ensure optimal performance. For information concerning database platform version and patch compatibility you should refer to the EPM Suite System Requirements document.

2.2.2 Operating Systems Microsoft Windows server platforms are the most compatible platforms upon which to run EPM. However, Windows is not the only operating system that EPM can run on. If you intend to use any other operating system you should consult your Business Objects representative for more information about compatibility. For information concerning Windows operating system version compatibility you should refer to the EPM Suite System Requirements document.


System Architecture System Components |2

2.2.3 Supported Networks Networks that support the TCP/IP protocol are usually suitable for supporting EPM traffic. Most common network solutions are therefore supported. We do not support Novell Netware environments, however. If you are in any doubt about the suitability or potential performance of your network you should consult your Business Objects representative to determine suitability before proceeding with an installation. For more information about using EPM with remote access platforms such as Terminal Server or Citrix, see section Remote Connection Software 3.4.4.

2.3 System Components The following section outlines the functions of each of the components within the EPM Suite and where necessary highlights points to note regarding the specific component.

2.3.1 Database Server The backend Database Server (Oracle or Microsoft SQL Server) handles the storage and retrieval of base data which is fed through to the EPM Model Servers for consolidation or calculation.

2.3.2 Primary Server The EPM Server handles login requests and licensing from users for a particular database system and monitors the status of the user’s session. This is denoted as the Primary EPM Server in EPM Configure. Only one such server may exist on an EPM system although a new EPM Server may replace an existing one (for example due to a machine failure) using the ‘Registered Components’ screen within EPM Configure. An error message appears if two Primary EPM Servers are registered on the same system, preventing you from completing the configuration.

2.3.3 Model Servers The Model Server stores and calculates models created in EPM. Multiple Model services may exist on the same system, allowing a greater degree of load balancing. Where several large models exist on the same database, each can be placed on a different machine for greater access to machine resources. The Primary EPM Server is often also a model server, responsible for the co-ordination of accounts as well as hosting the model services. It is not unusual to see all three main EPM services running on this machine (EPMSERVER, EPMMAIN, and EPMMODEL(s)). A Secondary Model Server will only be running the EPMMAIN coordinating service, and any EPMMODEL services required to calculate any open models.

2.3.4 Web Servers The Web Service will use Microsoft’s Internet Information Server (IIS). Business Objects provides an alternative in the form of a proprietary EPM Web Server, which is offered for testing and demonstration purposes only. The web server allows users access over the Internet or an intranet, to view Books and to generate reports that have been built in Model or Book Builder.


2|System Architecture System Components

There are several additional Web Service options that are available where IIS is the base Web Server. Secure Sockets Layer (SSL) technology (https:) may be used to view Books securely over the web provided a valid certificate has been obtained from a certificate authority. This supports 128-bit encryption of communication between the Web Service and Web Browser thereby reducing the risk of sensitive information being obtained by attackers. The Web Service used by EPM may be placed within a protective demilitarized zone (DMZ), thereby preventing direct communication between web clients and the application server for increased security. These options are discussed in more detail in the Web Service Configuration section.

2.3.5 Client applications The client applications enable the building of models to be used by all components in EPM. The Model Builder application allows full access to model building tasks including

• Structure definition

• Driver assignments

• Layout building

• Book building

The Book Builder application allows more restricted access to models and is designed specifically for book and layout building with no access to more advanced model building tasks. Both types of client can also be used to input data. Book Viewer is a simple application used to view and interact with books where the use of Internet Explorer and ActiveX controls is not desirable.

2.3.6 Web Client and Book Viewer The Web Client allows a user to access EPM Books viewable as web pages, which can display data input layouts, calculated values or reports. Users who access books this way, have a more restricted access to the EPM application in that they are unable to edit the model structure in any way and may only alter or view data where an administrator has granted specific security access. Book Viewer is a simple application used to view and interact with books where the use of Internet Explorer and ActiveX controls is not desirable.

2.3.7 Utilities

2.3.7.1 Report Manager Server The Report Manager Server is a service that manages Report Manager tasks. When a reporting task is initiated the service renders the EPM book(s) that forms the basis of the report and sends that data to the designated printer as a print job or Adobe PDF document.

2.3.7.2 Report Manager Client Report Manager offers the ability to produce hard-copy or soft-copy reports. This can be a single operation initiated by a user, or a repeated task scheduled to run at specific times. Whilst the primary purpose is producing hard-copies of EPM books it can also be used to pre-calculate consolidations required for frequently-used views.

10 BusinessObjects Profitability Installation Guide

System Architecture System Components |2

2.3.7.3 Work Manager Server The Work Manager server is a service that controls the management of Work Manager process instances. When a process instance is initiated the server monitors that instance, initiating any actions defined within the process as the users move from state to state.

2.3.7.4 Work Manager Client Work Manager client facilitates Business Process Mapping (i.e. producing flow diagrams of processes used within your business). Control of the process is automated so that when certain points are reached events are triggered, such as notifying users about changes, or providing links to specific EPM books. In this way users of the processes are directed to perform particular tasks such as completing timesheets, for example, and administrators can monitor the status of each user as they progress around the process. Work Manager can inform management of tasks that have not been completed within an allotted timeframe, and can take appropriate actions automatically.

2.3.7.5 Data Bridge Client The Data Bridge utility allows users to transform and load source data files into EPM models. Both data and metadata can be loaded from any number of source files simultaneously. Source files can be in any common text data format such as comma-separated values, or delimited text. Data Bridge can also be configured to recognize custom data formats.


2|System Architecture System Components


Preparation

3|Preparation Before you start

3.1 Before you start Before installing EPM suite it is advisable to consider the size and complexity of the model(s) to be built and the level of performance required from each. Suggested system requirements and points to note are outlined below. The first step in any preparation for installation, whether it be a new installation, an upgrade, expansion or patch, is to read the Release Notes that come with the software. These are in Adobe Acrobat Portable Document (PDF) format, and are located in the root directory of the Installation CD supplied by Business Objects. The Release Notes supply the latest information.

3.2 EPM Suite Requirements

3.2.1 Minimum specifications The minimum specification for hardware that will run the EPM Suite is discussed in detail in the document EPM Suite System Requirements that is supplied with your installation CD. It should be noted that the concept of a minimum level of hardware is the absolute minimum required for the software to operate, and should not be used as a guide as to the level of hardware required for EPM to operate efficiently. When considering what level of hardware you may need to run EPM you should also consider the future expansion requirements of your system, and the possible number and size of models that may be required to be run. Also consider that the simultaneity of operations (e.g. running two models at the same time) will affect the efficiency of your servers. We recommend that you contact Business Objects, and we will provide you with documentation to assist you in determining the best hardware for your purposes, both now and in the future.

3.2.2 Settings that can impact EPM In this section we discuss some of the pre-existing software and settings that may affect the operation of EPM, and which should be considered before installation.

3.2.2.1 Database settings Whichever relational database you use, it should be installed with settings that relate to the correct type of database that you are using. Check that any existing database system is set up for OLAP-type (analytical) databases rather than an OLTP (transactional) type. Transactional databases expect small but frequent amounts of data, and settings will be defaulted to favour such transactions. EPM performs mainly OLAP-type transactions that are infrequent and transfer potentially large amounts of data.

3.2.2.2 Other Software Other running software can affect the operation of EPM. In particular Anti-Virus software has the potential to perform a scan on any newly-created files. As EPM often creates temporary results files to store calculated data in memory-mapped files Anti-Virus software must be configured to ignore EPM directories, or should be removed entirely (depending upon the policies of your organization). For Microsoft operating system we also recommend that the Automatic Updates feature be turned off on the EPM servers. Installing updates has the potential to overwrite files that are essential to EPM without them having been tested for compatibility first.


Preparation Pre-Requisites |3

3.3 Pre-Requisites The installation process for EPM software initially installs some pre-requisite software that it is dependent upon for functions such as rules, book scripting, querying the database, rendering XML data, and producing static reports. After these have been installed you may be asked to restart. If they already exist EPM installation will start without delay.. Please check the EPM Suite System Requirements document to determine compatible versions.

3.3.1 Model Server Pre-Requisites

3.3.1.1 MS Scripting Engine One of the major features of the EPM Books is the ability to supplement the in-built functions of the existing controls using custom script. Supported scripting languages are VBScript and JavaScript (Microsoft’s Jscript 3.0 implementation specifically). The installer for this feature, and more information about it, can be found on the Microsoft web site.

3.3.1.2 Data Access Components The Data Access Components (MDAC or ODAC) are the vital link between the EPM Model Server and whichever relational database server you have chosen to use as your storage mechanism. It is important that the data access components be matched to the correct version of the underlying database. The installer for Microsoft’s Data Access Components, and more information about them, can be found on the Microsoft web site. The installer for Oracle’s Data Access Components, and more information about them, can be found on the Oracle web site.

3.3.1.3 Oracle Client Software If you are using an Oracle database server then you will need to install the latest compatible Oracle Client software onto each of the model servers that will connect to the database.

3.3.1.4 MS XML Parser In order to render EPM Books, to import XML data, and to prepare data for storage in XML format (via the Export feature) it is necessary to have Microsoft’s XML Parser installed. The XML Parser may already be installed on many of the potential server and clients in your organization, as it comes bundled with later Microsoft operating systems and data access components. You can use this link to check versions of the XML Parser and to determine whether your server or client machine may already have this pre-requisite.

3.3.1.5 MS Installer EPM uses the Microsoft Windows Installer (MSI) component to allow customizable installation of the EPM product. Prior to the advent of the Windows 2003 platform the installer component was not included as part of the operating system, and therefore it may be necessary to upgrade earlier operating systems to include this component in order to successfully install and deploy EPM. See the Microsoft web site for more information about this product.


3|Preparation Topology

3.3.2 Client and Web Server Pre-Requisites

3.3.2.1 Adobe Acrobat Reader In order to produce static versions of EPM Books (as reports, for example) it is necessary to have Adobe’s Acrobat Reader® installed. This product is supplied on your EPM Installation CD.

3.3.2.2 MS Installer See Section 3.3.1.5 for information about the Microsoft Installer program.

3.3.2.3 Visual Basic Scripting Engine The VBScript components is required on client and web server machines in order to process client-side scripts that may be present in EPM books. See section 3.3.1.1 above for more details on this component.

3.3.2.4 XML Parser The XML Parser is required to enable the EPM Book Viewer application to translate EPM Books. For more details on this component see section 3.3.1.4 above. Web clients do not require this pre-requisite, however, it is recommended that it be installed on those clients who have the option to use Book Viewer instead of a web client.

3.3.3 Database Server Settings To ensure data consistency the database server should be set up with Unicode character encoding (UTF-8 or equivalents). We recommend that database be installed with OLAP-type settings rather than OLTP (transactional) settings, as these may affect performance for larger models. Any client machines connecting to an Oracle TableSpace and accessing EPM via a Win32 interface (such as Model Builder, Book Builder or Book Viewer) will also require compatible Oracle Client software to be installed on the EPM Model Server(s).

3.4 Topology EPM has been designed as a three-tier application and the best performance is achieved when the optimum system architecture is utilized (see diagram in Section 2 System Architecture).

3.4.1 Resource Considerations Basic hardware suggestions and justification of these suggestions are outlined below for each type of server to aid in your choice of topology. • Database Server The Database Server requires a large amount of disk space and memory to accommodate the volumes of data stored for each model. Significant amounts of processing also occur when importing model structures and data. The database server engine, either Oracle or Microsoft SQL Server also requires large amounts of memory to run optimally (for further information, please refer to the EPM Database User Guides for Oracle or Microsoft SQL Server as appropriate). • EPM Server The EPM Server processes the login requests of users in the EPM system and monitors the status of the services utilized. This does not require huge amounts of processing power, memory or disk space and so may, if required, be installed alongside a Model Server without


Preparation Topology |3

too much significant impact. It is important to note that only one EPM Server may be configured within EPM. • Model Server The Model Servers for EPM need fast and reasonably-sized disks, fast processors and large memory for optimal performance. Disks are important as calculated model information is stored on the machine and is referenced whenever a change is made in the model so disk access speed and space here can improve performance. A large amount of memory is required to allow calculated results to be cached so allowing the faster retrieval of calculated data when required. Fast processors will better handle large numbers of requests from users which, when they cause the changes in either model structure or values trigger the recalculation of the models. Several Model Servers can be installed on the same EPM system, to support balanced processing of several models. Large EPM models can also be partitioned across EPM Model Servers to dedicate processing resources to portions of a model. For more information on portioning a model see the document EPM Model Partitioning. • Web Server For optimal performance Web Servers are best hosted on powerful multiple processor machines. Although not requiring as much memory as Model Servers, more memory will allow frequently used results to be cached so speeding up their retrieval.

3.4.2 Three-Tier Architecture We recommend dedicating a server to each specific function of the EPM Suite, i.e. a database server, a model server, and a web server. More model and web servers can be added for scalability if needed (more detail on scalability is provided in Section 4.2.3. When two functions are combined (e.g. a combined application and web server, or database and web server) there is always contention for resources which results in a serious degradation in system performance, and bottlenecks that can result in the clients having to wait until the resources become available. Separating the functions into separate tiers ensures that the hardware resources can be specified to a particular task and are dedicated to responding appropriately to users’ requests.

3.4.3 Stand-Alone Setup It is possible to install EPM onto a single machine which will act as all three server elements. This may be necessary to provide a demonstration machine, or if the models are being developed off-site. In this case we provide a specially-prepared installation that contains only


3|Preparation Topology

the core elements of the EPM Suite, and which has been specially designed to incur the smallest resource footprint possible. It is recommended that only the smallest models be developed using the Standalone version of EPM, and that the number of models be kept to an absolute minimum, in recognition of the limited resources, and the inevitable degree of CPU and RAM contention that will occur when models are called upon to provide calculated results. To install this self-contained version of EPM refer to the EPM Standalone Installation Guide on your Standalone Setup CD.

3.4.4 Remote Connection Software Remote connection software such as Microsoft’s Terminal Services and Citrix’s Metaframe software overcome some of the problems associated with limited network bandwidth for remote users. Consideration should be given, however, to the additional resources that may be required to support multiple clients when EPM is used over such links, as each client has an impact on the network bandwidth, and the remote software server’s CPU and RAM usage. If you need guidance on the potential impact of operating over such technologies you should contact Business Objects to discuss your specific scenario.

3.4.4.1 Terminal Services™ Business Objects supports the use of Microsoft’s Terminal Services product in relation to the usage of EPM. Terminal Services offers a potential solution to bandwidth and speed issues related to long-distance connectivity (for example, clients who connect to EPM servers via a Wide Area Network link). Please consult the document EPM Suite System Requirements for more information on version compatibility for this product,

3.4.4.2 Citrix Presentation Server™ Much like Microsoft’s Terminal Service, Business Objects supports the use of Citrix Presentation Server (formerly Metaframe) for remote clients seeking to overcome bandwidth and speed issues. Please consult the document EPM Suite System Requirements for more information on version compatibility for this product,

3.4.4.3 Virtualization Software The EPM Suite is fully compatible with VMWare virtualization software. The use of virtualization servers such as VMWare’s ESX Server is supported. Specific implementations using these products involving EPM servers should be discussed with Business Objects prior to installation, to confirm that the resources available will be sufficient to support the potential demands of the EPM Suite in such an environment.

3.4.5 Account Information and Connectivity This section acts as a single point of information for easy reference to information that is also provided in specific relevant subject areas.

3.4.5.1 Installation permissions In order to install the EPM Suite components you will need to have Local Administrator rights on the machine. This applies to both server and client machines. For servers and Windows client installations this allows essential settings to be written to the Registry, and for files and services to be registered with the operating system. For web clients it is essential to


Preparation Topology |3

have administrator access in order to permit the downloading of the ActiveX toolbar object (EPMDATAX.OCX) onto the client machine.

3.4.5.2 Database account Note: For legacy reasons the database that supports EPM is refered to as an EPO database. Many of its tables are prefixed with EPO and much of its associated logic uses this mnemonic rather than EPM. When a call is made from the model server to the database to retrieve stored model data it is necessary to perform those calls using database access credentials supplied during the configuration process. This account can either be an existing account, or preferably the accounts created by running the EPM SQL Scripts during the creation or upgrading of the EPO database schema. Two such accounts are created during installation : ‘AdminEPO’ and ‘UsrEPO’. The EPO account created for the purpose of establishing the EPO schema is called ‘ADMINEPO’, and has a default password of ‘PASSWORD’. This should be changed after installation to ensure database security. The EPO account that is created for the purposes of defining access from the model server to the database is the ‘USREPO’ account, which also has a default password of ‘PASSWORD’. Again, it is recommended that this be changed to something more secure as soon as possible after installation. The ‘USREPO’ user should be given the ‘EPOACCESS’ role within the database to ensure that it is mapped to the correct schema, and has the correct permissions. If the account does not have the necessary permissions this will often lead to an ‘80040E4D’ error message confirming that incorrect credentials have been supplied.

3.4.5.2.1 Database Schema credentials During the installation process the installer may be required to install or upgrade the EPO database schema. In order to do this an account that has database ownership privileges will be needed. More information relating to the use of these accounts is given in the EPM Database User Guides for Oracle or Microsoft SQL Server as appropriate.

3.4.5.3 IIS Anonymous User account Part of the post-installation tasks for the web server is to replace the in-built anonymous user account (IUSR account) with an account that has access across all of the domain(s) that your EPM servers may have to communicate. When an anonymous internet user attempts to connect to the web server, it can substitute the domain user credentials you have configured, and will therefore be granted access to the model server to which the web server is configured as a client. A lack of permissions in this area will often result in the web client experiencing an “Access is Denied” message, and being unable to log in via the browser.

3.4.5.4 DCOM permissions If you choose to use Microsoft’s DCOM transport layer then you will need to establish the security for accessing, launching and configuring the distributed services (i.e. EPMMAIN and EPMSERVER services on the Primary Model Server). To configure DCOM across a domain it is necessary to have Domain Administrator rights. If you are doing a Standalone Installation then all of your services will be launched on the same machine, and there is therefore no “distributed” element to the services, and no necessity to configure DCOM. For most installations you will be accessing the two main services from a different machine (i.e. a client that is physically separate from the Primary Model Server). To access the services


3|Preparation Licensing in EPM

across a network DCOM will need to be configured to permit a user group (typically a security group created to contain only EPM users) to access these services. We recommend that this group have Windows Domain User permissions at least.

3.4.6 Database Maintenance Plans See the supporting documents the EPM Database Guide for Oracle or the EPM Database Guide for Microsoft SQL Server for recommendations on setting up database maintenance, if no procedures already exist within your organization.

3.5 Licensing in EPM It is beyond the scope of this document to discuss the details of licensing options. A number of licensing packages are available on a component-by-component basis and taking into account the different types of users required by any organization. Packages can be tailored to best suit the requirements of any organization. For more details about licensing please contact your nearest Business Objects office or agent. NOTE: When more than one model server is installed the license keys should be entered/loaded in full on all model servers during the installation process. If changes are being made to licensing then those changes need to be made on all your model servers.

3.6 Defining a roll-back position If you are upgrading or expanding EPM then it is important that you define for yourself a rollback position, i.e. that you take measures to ensure that if the upgrade or expansion does not go according to plan, that you can return back to the point that you started from with relative ease and safety, and ensure that no data is lost as part of that process. We therefore recommend that you perform the following tasks before upgrading or expanding your EPM system:- 1. Back up any existing EPM databases and store them in a separate area to your current

EPM system (e.g. on a different disk, or network drive). This will back up all of your EPM models too.

For users who may wish to transfer selected models from one database to another without taking ALL the models: 2. Export the selected models to XML format, and re-import them after the upgrade.

This second option is also a good way of “starting afresh”, and quickly clearing out any models that may have become unused in the previous database.

3.7 Staff Involvement It is recommended that staff with the following roles be involved in the installation and configuration process:-

• Database Administrator

• IT Staff

• Project Sponsor

Each of these roles is elaborated upon in the following sections.


Preparation Pre-Installation Checklist |3

3.7.1 Database Administrator A Database Administrator is someone whose role is to create new databases, to define accounts and permissions for those databases, and to implement and manage maintenance tasks for the database post-installation. This is an on-going role, and their involvement should be continuous in terms of monitoring the resources used by the EPM system and planning for maintenance and expansion as it is required.

3.7.2 IT Staff This role is defined as someone who can create network (domain) accounts, has permissions to log onto servers as a Local Administrator, and who is familiar with software application installation. During the EPM installation process they will be required to provide account information, to create folders for EPM to store files, and to perform the installation and configuration activities at each stage.

3.7.3 Project Sponsor The Project Sponsor is the member of staff who is responsible for ensuring that the EPM system is installed and running in order to support their area of the business. The role of the Project Sponsor in the installation process is to oversee the activities of the Database Administrator and IT Staff to ensure that their work is coordinated at the correct times. Once installation has been completed the Project Sponsor may wish to organize the testing of the system connectivity and permissions to ensure that everything works and performs as expected. It is the responsibility of the Project Sponsor to appoint an EPM Administrator role.

3.7.4 EPM Administrator The role of the EPM Administrator is an on-going role for the lifetime of EPM projects. This role is responsible for creating EPM accounts and defining account and hierarchy security within the EPM system. They may also have sole responsibility for creating models and assigning permissions to those models, and for performing other EPM tasks that may require Administrator privileges, or sharing these privileges with others. The complete list of tasks that are the responsibility of this role are defined by your own organization’s requirements. A special account exists within EPM by default, and is called “Administrator”. This account does not take up a license, and has complete access to all functions within EPM. As such, the use of this account should be restricted, preferably to a single user with whom the Project Sponsor is in regular contact.

3.8 Pre-Installation Checklist Use the following checklist to ensure that you have all of the necessary resources available and configured before proceeding to the installation of the EPM software. This checklist applies to both new installations and upgrades.

• Is there sufficient disk space on each of the EPM servers that you are using?

o A model server requires a minimum of 20GB of free space, but consideration should be given to the number and size of any existing models. Large models may require up to 20GB each. A rough estimate may be obtained by using the existing temporary model directory sizes when a model is fully open.

o A web server should not require more than 20GB of free space in which to operate.


3|Preparation Pre-Installation Checklist

o A database server will require sufficient size to expand as more values are entered into the EPM system. Take account of intended expansion plans, and consider the amount of space that may be needed for SQL Server transaction logs or Oracle SGA/PGAs.

• Can servers communicate with each other?

o Inter-domain servers may need to be part of a Trust Relationship

o Can the servers PING each other?

o Are the TCP/IP settings correct for each server?

• Is DCOM running on each model and web server?

• Are the necessary database services running?

o For SQL Server, ensure the MSSQLSERVER service is running

o For Oracle, ensure that the associated Listener service is running

• Have the EPM pre-requisites been installed on the servers and clients?

• If you are intending to install the web server component, have you already installed Microsoft’s IIS on the web server?

• Have you read the Release Notes that have been supplied on the Installation CD to check for updates or changes relevant to your organisation?


EPM Installation

4|EPM Installation Initial Steps

4.1 Initial Steps The following chapter details the installation procedure of the EPM system. The EPM installation process is centered around selecting which specific EPM components are to be installed on the machine and the destination those selected components are installed to. The components available to install will be determined by the serial number supplied by Business Objects and decisions made when planning the system as outlined in Preparation (section 3).

LEGAL DISCLAIMER

In accordance with your contract with Business Objects, you must not make any changes to the software, including, without limitation, changes to any database schema or any general changes to the database on which the software runs (a “customer modification”). Any warranties contained including, without limitation, warranties with respect to the performance of the products, will be voided and of no further force and effect if customer makes any such customer modifications.

Services performed by Business Objects in investigating, identifying, or rectifying any issues arising due to any Customer Modification are not included within the Business Objects’s Maintenance Services. Accordingly, any services provided by and all costs and expenses incurred by Business Objects arising as a result of a Customer Modification will be invoiced to and paid by Customer. Such services will be invoiced at Business Objects’s then standard rates.

If you need more information about this, please contact the nearest Business Objects office for clarification.

The initial steps to be taken are common to all types of installation. • Obtain the appropriate EPM License Serial Numbers from Business Objects that will

be required during the EPM installation. There are two types of Serial Numbers comprising those required to allow installation of specific EPM components and access licenses to these components for a designated number of users. Access licenses are only required on the EPM Primary Server installation.

• Ensure the necessary prerequisites are installed before commencing the installation.

Once installation is complete EPM Configure is then used to customize the EPM components. Configuration can be carried out immediately after the installation process (following the required system reboot) or at any point after installation is complete. EPM must be configured before you can start to use the system.

4.2 Installation Type There are several types of installation that you might wish to perform. Once the pre-requisites are in place, and the location of the hardware has been determined, then you can consider what type of installation you require. In the following section we outline the differences between the types of installation.

4.2.1 New installation A new installation will require installation of software on each tier (server). Emphasis should be given to having the correct accounts, permissions and hardware resources to support the installation process.

4.2.1.1 Silent Installation EPM can be deployed (and updated) using the Silent Installation procedure. Server, client and web client components can be installed in this manner. Silent installations can be achieved via command-line parameters in a batch file, or via the Microsoft Installer mechanism.


EPM Installation Installation Type |4

On your installation CD you will find two additional install programs to assist you. The installation programs for deploying the web ActiveX component, and the Book Viewer application can both be found in the ‘Additional Installers’ directory. The Web Client Installer program is designed for use by System Administrators. It provides a means of installing the EPM ActiveX web toolbar object without the necessity for the installation to be performed by the client from within the web browser. There are several benefits to using the installer program instead of the web download method. These are:

The installation can be automated using a method such as Microsoft's System Management Server. This type of program can also distribute the executable to all the EPM clients at a convenient time.

The client machine can be updated with the correctly-versioned control before requiring access to the EPM web books, thus reducing inconvenience.

A centrally-controlled roll-out of the installation will ensure that there is consistency of software versions amongst the client community.

To install the program on the client simply run the executable WebViewerSetup.exe that is located in the 'Additional Installers' directory on your current EPM software CD. No reboot of the client is required after installation using this executable. For more detailed information on silent installation see the accompanying document EPM Silent Installation.

4.2.2 Upgrade When upgrading you should follow this procedure:-

• Backup the EPO database

• Note any existing DCOM settings against the EPMSERVER and EPMMAIN components (see Section 5.3.1)

• Ensure that any users that are in the EPM system log themselves out (this can be checked using the EPM Monitor application)

• Stop all running services using the EPM Service Manager application

• Un-install the EPM Suite using the ‘Add/Remove Programs’ feature and re-boot the server

• Re-install the latest version (see Section 4.6), re-applying DCOM settings as required

After rebooting your PC you will need to reconfigure the new EPM Version in the same manner as described in Section 5 EPM Configure onwards. During the uninstall process the services EPMServer and EPMMain are removed along with any associated DCOM settings. After the upgrade process DCOM will need reconfiguring for EPMServer and EPMMain (see section 5.3.1). If EPM was installed using sockets and if IP Filter rules had been created, these settings and rules will be retained in the default install directory after un-installation, in the form of COR and LOC files. Once the software is re-installed these stored settings will be available to the application again.

4.2.3 Expansion Expanding your EPM Suite will involve new licensing options and keys. All other settings should remain in place. Any new servers may possibly need account information during the configuration stage. To add your new components it may be necessary to re-install the EPM Suite on the server where the additional component is required, unless the component is going to have its own server. When expanding your EPM Suite you should follow the procedure outlined above for upgrading.


4|EPM Installation Order of installation

4.3 Order of installation Certain conditions must exist in order for EPM to be installed successfully. Primarily minimum system requirements must be met and specific prerequisites must be installed as detailed in the accompanying EPM System Requirements document. Installation should be implemented in the following order where possible. Certain components are dependent on the presence and successful configuration of specific additional components, particularly the Database Server and the EPM Server, and so should be configured in the following order where components are separated across different physical machines:

Database Server application (Oracle or Microsoft SQL Server)

Database Schema (table structure)

EPM Primary Model Server

EPM Secondary Model Servers

EPM Web Servers

EPM Work Manager Server (optional component)

EPM Report Manager Server (optional component)

Once the above are correctly configured you can install the EPM Windows client applications including Model Builder, Book Builder, Work Manager Client, Book Viewer, Report Manager Client and Data Bridge.

Web Server Installation

If using Microsoft IIS Web Server to access Web Books, ensure this is installed before installing the EPM Web Service, as the EPM web files need to be installed into the default IIS directory (normally ‘wwwroot’).

Permissions required for installation

It is important to ensure that the user logged into the machine has required permissions to perform the installation. Local Administrator privileges are required on the machine EPM is to be installed on as Read / Write access is required throughout. For DCOM configuration across a domain you may require Domain Administrator rights.

Likewise sufficient permissions are required when installing the Database Server. For information on how to login to the Oracle or Microsoft SQL Server database to install the database tables, please refer to the EPM Database User Guides for Oracle or Microsoft SQL Server as appropriate.

Work Manager Installation

An SMTP e-mail system should be available before installing Work Manager client, as this will be requested when configuring Work Manager to use a mail server after installation of the components.

Planning for future use of Work Manager

If at the time of install, you envisage some future use of Work Manager you should be aware of the following: Books containing the Workflow object require Work Manager client to be installed on any Model/Book Builder Client or Web Server that will be used to edit or view them. Work Manager client cannot be added after EPM has been installed without uninstalling and reinstalling the software.

Full installation and configuration of the EPM components is divided into two distinct stages. Firstly, the selected EPM components are installed as defined by the product serial numbers provided from Business Objects. This is then followed by the EPM Configure utility, which configures and customizes your installation to your business environment.


EPM Installation Database Server application installation |4

The EPM Configure utility can be run at any point after EPM has been installed to confirm or update settings and paths within the respective EPM applications.

4.4 Database Server application installation The installation and configuration of the RDBMS software is not something that Business Objects prescribes, and you should consult the documentation associated with your chosen database software in order to perform such an installation. We recommend that this installation be performed by your Database Administrator. If you wish to consult with Business Objects with regard to database settings then please contact us before beginning installation.

4.5 Database Schema installation Schema installation should be performed by your Database Administrator. Please refer to Section 5.6.1 to familiarize yourself with the account information that will be used during this process. Details of how to install or upgrade the EPO database schema is in the documentation EPM Database User Guides for Oracle or Microsoft SQL Server as appropriate.

4.6 EPM Model Server Installation Process The EPM Model Server installation process is undertaken on any server that you wish to use to calculate and build your EPM models. This may be a single server or several. In the case of a single server installation it will be designated as the Primary Model Server. For multiple servers you will have one server as the Primary Model Server, and any other servers will be designated as Secondary Model Servers. The Primary Model Server is responsible for coordinating the calculation of model results (note: this is not dynamic load balancing, as the Primary Server is simply instructing designated machines to perform calculation tasks), and also for validating user security. Secondary model servers simply calculate models. The procedure for installing model server software is the same for both a primary and secondary model server.

4.6.1 Beginning installation Login to the PC as an Administrator. You must have read and write privileges to the machine EPM is to be installed onto. Run Setup.exe from the CD Rom.

4.6.2 Pre-Requisites Check Before any software installation is started EPM will check that certain pre-requisites are installed. These are:-

• Microsoft XML Parser

• Microsoft SQL Server Native Client

• Microsoft SQLCMD

If any of these pieces of software are not present on the server then they will be installed. Once installed the server must be restarted before the main installation can continue.


4|EPM Installation EPM Model Server Installation Process

4.6.3 EPM Welcome Screen The first screen is displayed and describes some actions you may wish to take before commencing with the installation. By clicking Next you accept the copyright and international treaties warning.

4.6.4 Language Selection To install the EPM software you will need to decide in which language EPM should choose to present the installation screens. This option also determines which language the program shortcuts appear in and the language of the documentation installed.


EPM Installation EPM Model Server Installation Process |4

4.6.5 Registration Information Clicking Next will take you to a screen requesting your serial number sent to you by Business Objects.

Enter the serial number required in the drop-down box area and press the Add button to enter serial numbers manually or Load to load a collection of keys from an ELF file. You may be issued with more than one serial number. See below for details of what types of serial numbers are required for different types of installation. The Clear button will remove all the current license information should you need to change this (for example, if you are given an entirely new license key).

Serial Numbers in EPM



All installations of EPM need a permanent or evaluation product serial number to be added in the Registration Information screen. This gives access to the next step of the installation displaying the available components that can be installed. If the serial number added is correct then a list of the components you have available is displayed in the list box.

Serial numbers allowing a maximum predefined number of users access to different EPM applications (i.e. ModelBuilder, BookBuilder and End User) should be added on the EPM Server machine. The appropriate licenses will be picked up from this location when the respective users access EPM through the different applications. These numbers are stored in the EPO database to prevent duplication but must be registered on the EPM Server.

For more information on licensing see 3.5

After adding all Serial numbers required select Next to move on to the next screen. This screen allows you to select which EPM components you wish to install on your PC.

4.6.6 Component Selection Only those components enabled by your product serial number will be shown in this window and will probably be different to the example screenshot shown below.

After ensuring that all components to be installed on the machine have been selected click Next to choose a destination directory for EPM.

Note: You may choose not to install all components available on a particular machine, thereby using the same license key for several different types of installation.



4.6.7 Installation Destination Directory If you accept the default destination location click Next, otherwise click Browse to select an alternative location to install the program files.

If you choose to browse, a Windows standard directory box will appear, from which you can select your chosen location:

After selecting the directory for installation, clicking the OK button will take you back to the previous screen, where you can continue the installation process by clicking Next.



4.6.8 Communication Transport Mechanism Selection In this screen you must choose which method of network communication you would like the various EPM components to use. The choice is between Microsoft’s default DCOM and Windows Sockets transport layers.

4.6.8.1 DCOM transport Microsoft’s Distributed Component Object Model (DCOM) transport layer allows COM objects (which are the component objects used by EPM) to be accessed and launched on a server by remote clients. If DCOM is chosen you will need to configure it using the DCOM Configuration Utility (DCOMCNFG.EXE) to permit your user group to access and launch the server’s EPM services. Security is easy to configure in a Windows environment as DCOM integrates with existing Domain Users and Groups provided by the NT Security model. More detail on this is provided in the appropriate configuration section (Section 5.3.1).

4.6.8.2 Windows Sockets transport Windows Sockets (WINSOCKS) provides a simpler implementation of the transport layer, in that it will work across domains, firewalls and through NAT (Network Address Translation) with the minimum of configuration. Unlike DCOM, the Sockets layer installs additional EPM sockets services to relay communications between clients and servers, and these services have default global settings that do not require security configuration. Security is provided for via IP-based rules which can be defined so as to limit access to selected hosts in an individual or range-based manner using the host’s IP address to determine whether a connection can be made or not. The range of sockets available to EPM can also be restricted or redefined. More detail on this is provided in the appropriate configuration section (Section 5.6.2).



4.6.9 Start Installation The Start Installation screen is displayed. Click Next to start the installation or Back to modify any options previously defined in the installation process.

The Installing Screen shows details of the files being installed and the time remaining for installation to be completed.



4.6.10 Choose Default Language The default language screen is then displayed which allows you to choose the default language for the application. This will determine the language used for the user interface (screen information, menu item names, and other textually presented information). Currently only English (United States) and French are supported. The default language may be changed later in the EPM Client.

4.6.11 Installation Complete After a few moments the installation will be complete. Select Finish to exit installation. A message box will appear prompting you to restart your machine. At this point you can choose whether you want to continue using your machine by selecting Cancel or to restart and finish the configuration of your EPM installation. If you choose not to restart at this point, the next time your machine is restarted you will be prompted to continue with configuration. You can then choose whether to complete your EPM configuration at this time or to cancel this task. EPM configuration can be carried out at any point after a successful installation using the Configuration Wizard within Start | Programs | Business Objects | Tools | EPM Configure.

4.6.12 EPM Book Viewer Installation To install EPM Book Viewer, EPM must first be installed and configured on your application server. This makes Book Viewer installation a simple process, which opens with EPM Book Viewer Welcome screen followed by the Destination Location screen (described in 4.6.7). Once you have selected your destination directory, installation can commence with the Start Installation screen (described in 4.6.9). After a few moments the installation will be complete. Selecting Finish will initiate the EPM Client Connection Wizard, which configures the Book Viewer application to the EPM Server (see section 5.14 for further information).


EPM Installation Web Server installation |4

4.7 Web Server installation The web server installation shares many of the aspects of the Model Server installation screens. Details have been provided in previous sections, and where applicable reference will be made to these sections where required. The installation is started by running the Setup.exe file available on your Installation CD.

4.7.1 Pre-Requisites Check Before any software installation is started EPM will check that certain pre-requisites are installed. These are:-

• Microsoft XML Parser

• Microsoft SQL Server Native Client

• Microsoft SQLCMD

If any of these pieces of software are not present on the server then they will be installed. Once installed the server must be restarted before the main installation can continue.

4.7.2 Language Selection To install the EPM software you will need to decide in which language EPM should choose to present the installation screens. This option also determines which language the program shortcuts appear in and the language of the documentation installed.

4.7.3 Registration Information Enter the serial number required in the drop-down box area and press the Add button to enter serial numbers manually or Load to load a collection of keys from an ELF file. You may be issued with more than one serial number. The Clear button will remove all the current license information should you need to change this (for example, if you are given an entirely new license key). After adding all Serial numbers required select Next to move on to the next screen. This screen allows you to select which EPM components you wish to install on your PC.

4.7.4 Component Selection Only those components enabled by your product serial number will be shown in this window. If this server is to be a dedicated Web Server then you should select the Web Server component. Other components selections will be based upon the role of the server, and your license entitlement.

4.7.4.1 Work Manager Client components on the web server If you have installed the Work Manager Server on your primary EPM Model Server you will need to install the Work Manager Client component on your EPM Web Server. The web server will need to ability to decode information relating to Work Manager components as they are passed via the EPM web books, and these necessary files are only available if a Work Manager Client component is installed. After ensuring that all components to be installed on the machine have been selected click Next to choose a destination directory for EPM.


4|EPM Installation Web Server installation

4.7.5 Installation Destination Directory If you accept the default destination location click Next, otherwise click Browse to select an alternative location to install the program files. If you choose to browse, a Windows standard directory box will appear, from which you can select your chosen location: After selecting the directory for installation, clicking the OK button will take you back to the previous screen, where you can continue the installation process by clicking Next.

4.7.6 Communication Transport Mechanism Selection In this screen you must choose which method of network communication you would like the various EPM components to use. The choice is between Microsoft’s default DCOM and Windows Sockets transport layers.

4.7.7 Web Server Type Selection The Web Server Type screen offers a choice of Microsoft’s IIS web server, or the proprietary EPM web server. The EPM web server is not designed, however, for large-scale web implementations, and should be considered only for small-scale (e.g. single machine) installations or for testing purposes. NOTE: IIS must first be installed on your designated web server(s) in order to use an IIS Web Server for viewing EPM Books in a browser. This cannot be done after the EPM installation.


EPM Installation Web Server installation |4

Install EPM Web Service in the default sub-directory for IIS (usually IIS’s ‘wwwroot’ directory, wherein a virtual directory of ‘epo’ will automatically be created), or your preferred location if using the EPM Web Server.

4.7.8 ASP File Location You may leave the installation directory for your Web Server’s ASP files at the default, or if you prefer to install these files in a specific location you can enter or browse for a location suitable to your organization. The file location is simply a storage area for EPM’s ASP files before they are transferred to the correct location during the configuration stage of the installation process.

4.7.9 Start Installation The Start Installation screen is displayed.


4|EPM Installation Web Server installation

Click Next to start the installation or Back to modify any options previously defined in the installation process.

4.7.10 Choose Default Language The choice of language is only relevant at this time if any use-interface components have been installed alongside the Web Server component. The default language screen is then displayed which allows you to choose the default language for the application. This will determine the language used for the user interface (screen information, menu item names, and other textually presented information). Currently only English (United States) and French are supported. The default language may be changed later in the EPM Client.

4.7.11 Installation Complete After a few moments the installation will be complete. Select Finish to exit installation. A message box will appear prompting you to restart your machine. At this point you can choose whether you want to continue using your machine by selecting Cancel or to restart and finish the configuration of your EPM installation. If you choose not to restart at this point, the next time your machine is restarted you will be prompted to continue with configuration. You can then choose whether to complete your EPM configuration at this time or to cancel this task. EPM configuration can be carried out at any point after a successful installation using the Configuration Wizard within Start | Programs | Business Objects | Tools | EPM Configure.


EPM Configure

5|EPM Configure About Configuration

5.1 About Configuration This chapter is written with the intention that you skip only to the sections which are relevant to the components of EPM installed on a specific machine and which you wish to configure or reconfigure. This does not need to be read from beginning to end, as not all sections may be relevant to your setup. Sections marked ‘NEW INSTALLATION’ indicate configuration settings or behavior that is only relevant immediately after a new installation of the software. Sections marked ‘RECONFIGURATION’ relate to settings or behavior that will appear whenever the EPM Configure program is invoked after the initial installation. The path followed through this chapter is likely to differ depending on whether an installation is to configure a Server, Client, or a combination of system design options (i.e. Model Server, Web Server, Report Manager, and Work Manager).

IMPORTANT: EPM Configure updates relevant machine settings after each configuration screen. Therefore selecting Cancel before EPM Configure is complete will not return the system settings to their previous state as any new settings you may have made will be retained.

NEW INSTALLATION: After installation the Configuration Wizard will appear immediately you log in following a restart. EPM Configure MUST be run before users can start to access the system. For configuration options relating to a new installation refer to section 5.3. RECONFIGURATION: The EPM Configuration Wizard can be run at any time from Start \ Programs \ Business Objects \ Tools \ EPM Configure to display the EPM Configuration Welcome screen.

5.2 EPM Configuration Options The next screen after the Welcome Screen displays a choice of EPM components installed on the machine, which may be configured. Choosing which components to configure prevents you


EPM Configure EPM Configuration Options |5

having to run through all the configurable options installed. For example, if only the location of the EPM Server you are connecting to needs to be changed you would check the box next to ‘EPM Servers’ and uncheck all other components displayed. In the ‘EPM Options Available’ screen check the boxes of the components you wish to configure. If all boxes remain checked you will proceed through configuration of ALL the components installed on your machine.

There follows a short description of each of the configurable components:

EPM Servers Choose to configure the current machine as a CLIENT, PRIMARY SERVER, or MODEL SERVER; also configure DCOM or Sockets transport mechanism to ensure secure communication between client and server components. The Primary EPM Server handles login requests by users. Model Servers handle processing and calculation required by models.

Web Server Choose which web server type you require, either Microsoft’s IIS Web Server, or the proprietary EPM Web Server. You can also decide the location of temporary and graphics files, and specify the URL address of your web server.

EPM Work Manager Configure settings for the Work Manager server logon account(the account Work Manager uses to communicate with the EPM Server); set up e-mail server options; specify a temporary Work Manager file storage location.

EPM Report Service Specify the IP Address or DNS Name and port number for the machine hosting the ‘EPM Reporting Service’.

To configure EPM Server see 5.3

To configure EPM Work Manager only see 5.4


5|EPM Configure EPM Server Installation Type

To configure an EPM Client see 5.9

To configure a Web Server only see 5.11

To configure Report Manager Server only see 5.12

5.2.1 Communication Transport Mechanism Selection In this screen you must choose which method of network communication you would like the various EPM components to use. The choice is between Microsoft’s default DCOM and Windows Sockets transport layers. For more detailed information on this option see Section 4.6.8.

5.3 EPM Server Installation Type From the EPM Installation Type screen, decide whether you are installing the Server or Client for EPM. If the machine is to be a Web Server, Work Manager Server or Report Manager Server only (i.e. not a Model Server) then the client option should be selected. Unless you selected the Sockets transport mechanism, DCOM Settings will need to be configured for Model Servers to allow successful communication between the Primary Model Server and any Secondary Model Servers (see 5.3.1). Multiple Model Servers can be installed in EPM allowing users the flexibility to specify which server they wish to create a model on, thus spreading the workload where several large models exist.

Important: There can only be one Primary EPM Server installation through which additional EPM Model Servers communicate. The EPM Server handles login requests by users. Model Servers handle processing and calculation required by models.

If an installation is to be the Primary EPM Server then the box should be checked underneath the Server radio button.


EPM Configure EPM Server Installation Type |5

For Model Server only installations this box should be unchecked. Model Server only installations will then lead to a screen where the name of the EPM Server should be entered. Enter the EPM Server name manually or browse to the machine name and continue with the configuration process.

Note: When re-configuring to define a new Primary EPM Server, the existing Model Server assignment is not changed automatically. Models will still be associated with the previous application server, until this is changed manually via the Model Administration screen in the EPM Model Builder application (see EPM Administration & Security Guide for further details).

Model Servers are installed from the EPM Core component in the ‘Select Components’ screen within the installation process. The Builder application does not need to be installed although it can be useful when trying to eliminate communication problems that clients might encounter. On a three-tier system you should install the Server version on the middle tier and the Client version on any client workstations. An EPM Server should be installed alongside the OLE DB provider for your database, to allow you to connect to your database.

When using Oracle Database Server, ensure the Oracle Client software is installed on the Server machine.



5.3.1 DCOM Configuration Unless you selected the Sockets transport mechanism then you will need to configure the DCOM settings on all EPM Servers to allow appropriate users permission to access and launch the required services:

• EPMServer

• EPMMain

In the EPM Server Installation Type screen, click the ‘Configure DCOM Manually’ radio button and then click Config DCOM if you wish to configure your DCOM now. Alternatively, you can complete the installation and perform this manually later.

If you are running on Windows XP or 2003, Configuration Management is incorporated into the Windows Component Services console. You must expand the Computers and DCOM Config items to display all the installed Applications that use DCOM. [Note: In Windows 2000 you are taken to the Distributed COM Configuration Properties screen, where you can double click EPM Server under the Applications tab.]



Scroll to EPMServer, right click it and select Properties. You will now see the EPMServer Properties screen where you must click on the Security tab.

Firstly, ensure that the radio button under Launch and Activation Permissions is set to Customize and click Edit.



Using Add, select the appropriate groups and names from the Names list. Repeat until all your groups/users are added and appear in the Group or user names box as shown. Now check the Allow boxes to set the necessary types of access for confirmation as shown. Click OK again to return to the DCOM Properties screen. Repeat the above steps and add the same groups/users to “Access Permissions”. When this is done, click Apply then OK on the Properties screen. Select EPMMain in the DCOM Configuration Properties screen and apply the same settings as for EPMServer. When finished, click OK from the EPMMain Properties screen. The DCOM security settings for installations where the Application Server and Web Server are installed on the same machine should be applied using the following local accounts.

• Internet Guest Account I_USR_<machine name> • Launch IIS Process Account I_WAN_<machine name>

You are advised to apply these accounts with the necessary levels of access to the EPM Services as follows:

EPM Service User & Permissions EPMServer I_USR_<machine name> EPMMain I_USR_<machine name> EPMMain I_WAN_<machine name> EPMWorkManagerService I_WAN_<machine name>

Note that the EPMWorkManagerService only applies to servers hosting Work Manager.

When Application Server and Web Server are on separate machines that may also be on different domains, you must include settings for accounts that have access to both machines and/or domains. Business Objects technical support can advise you on the settings that are most appropriate for your environment.



When you have completed your DCOM settings you will be returned to the EPM Installation Type screen. Click Next.

To configure EPM Work Manager Installation Type see 5.4

To continue to configure the EPM Server if Work Manager is not installed see 5.6


5|EPM Configure Work Manager Installation Type

5.4 Work Manager Installation Type Select what type of Work Manager installation is to be carried out. This can be either a Server installation or a Client installation.

To specify Work Manager Server DCOM settings see 5.4.1.

If Work Manager Client is selected see 5.5.

If Work Manager Server is selected see 5.6 to continue configuring EPM Server.

5.4.1 Workflow DCOM Configuration A Work Manager Server installation that uses DCOM has to have its settings specified in the same way as those for the EPM Server and EPMMain services described in 5.3.1. You will have to select the EPMWorkflowService under your DCOM Configuration Properties and apply the Access and Launch permissions in the same manner.


EPM Configure Work Manager Client Configuration |5

5.5 Work Manager Client Configuration To install EPM as a client choose the Client radio button from the EPM Installation Type screen and click Next. The Client Setup screen is displayed and you are requested to enter the name of the EPM Server into the dialog box or click Browse to search for the relevant server.

If you selected Browse, the following screen will be displayed for you to navigate to the appropriate server.

Once selected you will be taken to the previous screen, your chosen computer will appear in the dialog box and you should now click Next to continue.


5|EPM Configure EPM Server Configuration

Having entered a Server you now need to test the connection between the Server and your machine. Click Next to test this connection.

If the EPM Server option was selected see 5.6 to configure the Server options.

If the Client option was selected see 5.9 to configure the client options.

5.6 EPM Server Configuration Multiple Model Servers can be installed in EPM allowing users the flexibility to specify which Server they wish to create a model on, thus spreading the workload where several models exist.

There can only be one Primary EPM Server installation through which additional EPM Model Servers communicate. The EPM Server handles login requests by users. Model Servers handle processing and calculation required by models.

If an installation is to be the Primary EPM Server then the box should have been checked underneath the Server radio button. For Model Server only installations this box should be unchecked. Selecting the Server option in the EPM Installation Type screen will lead you into several configuration options, which are detailed below including:

• Database

• Advanced IP Filtering

• EPM Model Directory Selection

• License Key Configuration


EPM Configure EPM Server Configuration |5

• Database Auditing Selection

• Server Component Registration

5.6.1 Database Connectivity The default setting for EPO database communication for both SQL and Oracle is to use the built-in native database calling mechanisms. For Oracle this is the Oracle Call Interface (OCI), and this is selected by choosing the Oracle Instant Client option in the Database Connectivity screen. For SQL Server the native option is the SQL Native Client option. The option exists to use OLEDB connectivity, if preferred. We provide this option for legacy connectivity issues, but it is not the recommended option as it is noticeably slower than the native calling mechanism. Native calls are part of the infrastructure of the database software and do not require to be translated into an external compliant format, as OLEDB calls do.

Your choice of Database Access Protocol will affect the next screen to be displayed: • Oracle Instant Client Server Database Setup – for native Oracle connectivity

• SQL Server Native Client Database Setup – for native SQL Server connectivity.

• EPM Server Database Setup – for OLEDB selection

Note: In Oracle installations swapping between the two means of communication will cause any existing DCOM settings to be lost.



5.6.1.1 EPM Server Database Setup The EPM Server Database Setup screen will be displayed. Enter your relevant database details as defined in your database setup. This will define your database access using native database connectivity.

If this is not a Primary Server the screen below will not be editable and will reflect the database settings of the EPM Primary Server.

5.6.1.1.1 SQL Server Database Connectivity Details can either be entered manually or by using the Build functionality. Details required to successfully set up a database are outlined below.

• Database Provider For Microsoft SQL Server this should be ‘SQL Server Native Client’.

• Data Source This is the name of the Microsoft SQL Server instance, and often this defaults to the name of the database host machine.

• Catalog (Database Name) This field is only required if using Microsoft SQL Server in which case the name of the database you wish to connect to should be inserted here.

• User Security Depending on security preferences one of the radio buttons should be checked to define how EPM is to access the database. If the NT Integrated user logged into the EPM Server machine has Database Owner (dbo) access to the database then ‘Use Windows NT Integrated Security’ may be used. If Integrated security is used, then the Logon Account for the MSSQLSERVER service should be set to be this account too.

Alternatively the User assigned to the EPOACESS role may be used here (by default ‘USREPO’ user is created which you may choose to use). For either Server database you may choose to restrict the privileges a user has to prevent access to additional databases. If this is the case use the user created in the Server Database setup.



If you click on the Build button the Data Link Properties will be displayed. From here you can fine-tune the database provider and connection or you may simply use this screen to select details using drop downs rather than manual entry. The details required remain the same as those detailed above.

5.6.1.1.2 Oracle Instant Client Server Database Setup The Oracle Instant Client Server Database Setup screen will be displayed. Enter your relevant database details as defined in your Oracle database setup. This will define your database connection using OCI access protocol.



Details required to successfully set up a database are outlined below. • Database Provider

This will be Oracle Instant Client – the native Oracle communication mechanism.

• Database Host On an Oracle server then the Data Source is the name of the connection i.e. the Service Name or Service Identifier (SID).

• Port The default port number that your installed Oracle database communicates on. Unless changed, the default value for this is Port 1521.

• Service Name Enter the name of the Oracle instance (Tablespace) created on your database server.

• User Security You should supply the name of the Oracle Tablespace owner and their associated password in these fields.

• Load TNSNAMES file If you have an existing TNSNAMES file that contains the information you need to connect to your Oracle instance then this file can be loaded, to save having to reenter the information. See Section 5.6.1.1.3

Note: If installing an upgrade version of EPM, and the Oracle database has previously been configured using OLEDB, you must first remove the Oracle client and stop EPM Services, before attempting to re-configure using OCI. This process will cause your DCOM settings to be lost, so you will have to restore them.

5.6.1.1.3 Configuring Oracle Instant Client to use TNSNAMES.ORA file It is possible to configure EPM to use a TNSNAMES.ORA file to provide the hostname and port number of the Oracle connection string whilst utilizing Oracle Instant Client connectivity. This information would normally be stored in the registry. In the Oracle Instant Client Server Database Setup window you have the choice of entering the database host and port details manually, or selecting an existing TNS name from a tnsnames.ora file.



To use a TNSNAMES.ORA file set up an environment variable using the following details: • Variable Name: TNS_ADMIN • Variable Value: <folder path of the tnsnames.ora file>

In order to provide EPM with the location of the TNSNAMES.ORA file simply click the Setup TNS Names… button on the Oracle Instant Client Server Database Setup screen. EPM will use the information stored in the TNSNAMES.ORA file to provide the connection details. When the window opens click on the Browse button to select the folder path of the TNSNAMES.ORA file. When you have selected the correct folder and clicked OK, the content of the TNSNAMES.ORA file should appear in the TNSNAMES.ORA text box. Click OK to return to the Oracle Instant Client Server Database Setup window. Now enter the TNS Names entry in the service name field along with the user name and password (the host name / port may be left blank). Should the use of the TNSNAMES.ORA file become redundant it will be necessary to relocate this file before it is possible to re-configure EPM to use OCI.

5.6.2 Advanced IP Filtering If you have selected Sockets as your Communication Transport Mechanism then you can optionally create rules to allow or deny access to the EPM server services. These rules are configured to identify the originating machine’s IP or network address and then allow or deny access to the EPM server service. Each EPM server service has its own list of rules allowing granular control over which hosts or networks can communicate with specific EPM server services. The ordering of the rules in each list is significant and this is discussed in section 5.6.2.2. Rules for each service are configured for the appropriate server. The specific servers for which rules can be written are determined by the type of installation performed on each machine.

If no rules are present then the default is to allow communication between all machines and the services they run. To create a rule for a particular Server, select it from the Server Name drop down menu and then click on the Add button. To apply a rule or rules to all servers, click on the Apply to all Servers button. IP filters can be configured for the servers:



• EPM Main Server

• EPM Model Server

• EPM Server

• EPM Work Manager Server

Note: If you have set up rules within a previous version of EPM, your Servers as listed in the ipFilters.ipt file may now need to be renamed. This is because the ipFilters.ipt file is a user-generated text file and is not automatically updated on upgrade. To edit the ipFilters.ipt file, go to C:\Program Files\Business Objects\EPM\ipFilters.ipt.

5.6.2.1 Defining Rules In the following example a rule has been created using Dotted decimal notation, that allows access for all machines with the Network Number 172.16.1.X in the range 172.16.1.0 – 172.16.1.63

The value of X which in this example is represented in the right-most text field of the Network Number defines the range of Host IDs. The Network Number Preview text boxes display the results of applying the Subnet Mask to the Network Number. If Classless Inter-Domain Routing (CIDR) is selected then the Subnet Mask will be transformed to its equivalent CIDR block prefix as displayed below:



The Network Number Preview text boxes display the results of applying the Subnet Mask or CIDR block prefix to the Network Number. The value of X has been changed to show how the range of permitted Host IDs displayed in the Network Number Preview has been increased from 172.16.1.0 – 172.16.1.63 to 172.16.1.65 – 172.16.1.126 Select Allow or Deny to specify whether or not the communication is permitted.

5.6.2.2 Rule Ordering When rules are created then the order in which they are listed is important as they are evaluated in consecutive order from the top to bottom. If the IP address of the calling machine matches the specific IP address or range in the uppermost rule in the list then communication is allowed or denied on the basis of that rule alone. If there is no match then evaluation of the rules continues onto the next. In a situation where the IP address of the calling machine does not match any rule then the default applies and all communication would be allowed. Rules are stored as text in the IPFilters.ipt file which is located in the C:\Program Files\Business Objects\EPM folder by default. This location can be changed using the Browse button.

5.6.2.3 Changing the assigned port from the default settings The ALTransportCoordinatorService coordinates traffic between the various EPM Servers and a client. The ports allocated to each server and the permitted range of ports available for allocation is recorded in the ALTransportCoord.cor file. Following a server type installation, ALTransportCoordinatorService is assigned by default to port 6790. Unlike the other services the ALTransportCoordinatorService runs on both client and EPM server machines. At startup the value for the port for this service is initialized from a value held in the ALTransportCoord.loc file. It is possible to manually edit the ports that the various servers use by altering the port value setting on the LocalServerMap line in the ALTransportCoord.cor file. When the ALTransportCoordinatorService is restarted the servers will use these new values. The default range of ports used by the ALTransportCoordinatorService is from 6791-7790.



If the ALTransportCoordinatorService value is altered (i.e. the RemoteCoordinatorPort value) then the .cor and .loc files on all other EPM clients will require amending to reflect this change. Once changes have been made then the ALTransportCoordinatorService must be restarted so that it uses the new settings. On uninstall the ALTransportCoord.cor and ALTransportCoordinator.loc files are not deleted but remain in the Program Files\Business Objects\EPM directory. The former is however changed as all references to the deleted services are removed, retaining only the values for the RemoteCoordinatorPort server port and the range of ports. These values will be used on reinstallation.

5.6.3 EPM Model Directory Selection Click Next to accept the default Model Directory or click Browse to navigate and change the directory. The amount of recommended, minimum and available disk space is displayed in this screen for your information.

Tip: It is strongly advisable to select a drive with a large amount of free disk space and Read & Write access, as this folder will be used to install your EPM models, which are likely to be a substantial size.



Click Next to continue to the Test Connection screen from which you can test your connection to an EPM Server or return to edit your configuration options.

Click Next to continue to the License Key Configuration screen whilst testing your connection to the EPM Server. The EPM Server service will be stopped and restarted when the ‘Next’ button is clicked.

5.6.4 License Key Configuration The License Keys screen is displayed in which you can modify your license keys required to access specific EPM options. The following options are available:

Add - to add new license keys from a text file Load - to load a collection of license keys from an ELF file. Remove - to remove an existing license key Clear All - to remove all license keys.

All serial numbers available from your selected database will be displayed here.

Serial Numbers in EPM

All installations of EPM need a permanent or evaluation product serial number to be added in the Registration Information screen. This gives access to the next step of the installation displaying the available components that can be installed. If the serial number added is correct then a list of the components you have available is displayed in the list box.

Serial numbers allowing a predefined number of users access to different EPM applications (i.e. ModelBuilder, BookBuilder and EndUser) should be added on the EPM Server machine. The appropriate licenses will be picked up from this location when the respective users access EPM through the different applications. These numbers are stored in the EPO database to prevent duplication but must be registered on the EPM Server.

For more information on Licensing see 3.5



The EPM options or components that are available with each license key are displayed in the lower window when the key is selected in the upper window (e.g. EPM component access, User number limits).

5.6.5 Database Auditing Selection The EPM Database Auditing screen allows you to enable or disable database auditing. This is a global database setting. EPM models still require auditing to be enabled individually before auditing information is collected and can be displayed. For further information on database auditing, please refer to the EPM Database User Guide for Oracle or the EPM Database User Guide for Microsoft SQL Server, as appropriate.



If you choose to alter the current selection, a dialog box will appear, asking you to confirm that you now wish to disable/enable database auditing.

5.6.6 Server Component Registration The Register Components screen allows you to register the EPM components you wish to install. You will see all server components available across all server machines in this screen. This allows flexibility in where the components are available (for example moving the Primary EPM Server from one machine to another where essential maintenance is required). If the installation is a Primary EPM Server installation all the check boxes will be editable. You can alter which components are to be registered on all Server machines from this screen.



If the installation is not a Primary Server only the check boxes corresponding to that machine name will be editable.

If Work Manager Server was selected see 5.7 to configure the Server options.

If the Web Server is installed on this machine see 5.11 to configure this component.

If Report Manager Server is installed on this machine see 5.12 to configure this component.

If no other EPM components are installed on this machine see 5.10 to continue the configuration.


EPM Configure Work Manager Server Options |5

5.7 Work Manager Server Options Enter your EPM Administrator username, password, SMTP address and SMTP Port information in the Workflow Options screen. This screen defines the security information used by Work Manager.

The configure for Auditing options allows you to configure which actions are logged in the audit log when a state changes in Work Manager. Simply select Configure and select the relevant options using the check boxes. This audit log is global throughout Work Manager. Select Next to continue configuration.

If no other components are to be configured as detailed above see 5.10 to continue the configuration.

If EPM client was selected and this machine is not to be a Model Server see 5.9 to configure the EPM Client.

If this machine is a Model Server and the Web Server is installed see 5.11 to configure the EPM Web Service options.

If Report Manager Server is installed and this machine is a Model Server see 5.12 to next configure this EPM component.

5.8 EPM Single Sign On (SSO) EPM can be configured to use Standard Security where the user logs into each application separately, or it can be integrated into the existing network security environment allowing Single Sign On (SSO). The advantage of the latter is that, as long as the EPO database contains a user name that matches one in the selected SSO type, having logged onto the computer a user can open any of the EPM applications that their role allows without entering a password.


5|EPM Configure EPM Single Sign On (SSO)

EPM can be integrated into a Windows NT, Active Directory or LDAP compliant environment. Selecting either EPM Standard Security or Windows NT Security options requires no further configuration.

If either the Windows Active Directory Security or LDAP security options are selected, the user will be able to specify connection parameters that will return the user name from either the Active Directory or the LDAP directory.

'Enable Secondary Logon' can be checked for the Win32 and/or Web applications. This enables users to manually log into the Web using a secondary username, if logging onto the


EPM Configure EPM Single Sign On (SSO) |5

Web through Single Sign On fails for any reason. Provided ‘Enable Secondary Logon’ has been set during EPM Configure, the usual login form will be displayed. Both the Active Directory (above) and LDAP (below) configuration screens contain an area to enter parameters to return a username from a directory, an area that previews the request using the current user and computer settings and an area containing an explanation of use of the macros with an example. By default the username request area is preconfigured with typical parameters that should return the username of the current user to the EPM application. This can be tested by clicking on the Test button which will return a success message if the username request succeeds. The macros %DOMAIN% and %USER% are used to pick up the domain and the username for the current user from the computer. The username request parameter should be modified to suit other environments. The final ‘user’ parameter in the Active Directory username request specifies the information type requested. If LDAP Security is selected the ‘machinename’ and ‘port’ parameters in the LDAP username request should be replaced with the actual values. Parameters other than ‘cn’ and ‘dc’ can be utilized in building the Distinct Name (DN) that comprises the username request parameter for the LDAP server e.g. ‘ou’ and ‘uid’.

5.8.1 Linking BusinessObjects Enterprise to EPM The Enterprise security option may be available on the dropdown. If the user selects it they will be able to establish a link to EPM from applications in BusinessObjects Enterprise such as InfoView. This is done by copying a folder containing linking files into a specific location. The link is then created automatically. For full details, see the BusinessObjects Enterprise Integration Guide.


5|EPM Configure EPM Client Configuration

5.9 EPM Client Configuration To configure EPM as a client choose the Client radio button from the EPM Installation Type screen and click Next.

If this machine is to be a Server installation for Web Server, Work Manager or Report Manager but not a Model Server the DCOM security must be setup up. See 5.3.1 for details on how to do this.


EPM Configure EPM Client Configuration |5

5.9.1 EPM Client Setup The Client Setup screen is displayed and you are requested to enter the name of the EPM Server into the dialog box or click Browse to search for the relevant server.

If you requested to Browse, the following screen will be displayed for you to navigate your way to the appropriate server.

NOTE: The server setting selected will be written to the computer’s Registry. Local Administrator rights are required for this setting to be written to a central location. If the person configuring this setting does not have Local Administrator rights then an “override” Registry key will be generated, and this setting will be used in preference to the centrally configured “default” server setting.


5|EPM Configure EPM Client Configuration

Once selected you will be taken to the previous screen, your chosen computer will appear in the dialog box and you should now click Next to continue.

5.9.2 EPM Work Manager Client configuration If you have chosen to install the Work Manager Client components (see 4.7.4.1 Work Manager Client components installation) then you should now be presented with the Work Manager Client configuration screen. This simple screen asks you to input (or browse for) the name or IP address of the EPM server which has the Work Manager Server components installed upon it. For more information see 5.5 Work Manager Client Configuration.

5.9.3 EPM Server Test Connection Having entered a Server you now need to test the connection between the Server and your machine. Click Next to test this connection.

The ‘Test Connection’ button tests whether the database connectivity information supplied in previous screens is sufficient to make a connection to the current EPO database server, and also checks whether the EPM Server service on the Primary Model Server can be connected to.

If EPM Web Service is installed and to be configured see 5.11.

If EPM Report Manager Server is installed and to be configured see 5.12.

In all other cases see 5.10 to continue configuration.


EPM Configure EPM Log Files Location |5

5.10EPM Log Files Location Log files are generated by EPM (such as error logs). You are prompted in the EPM Log Files location screen to define a suitable folder in which these files are to be saved. You will need Read / Write access to this folder. Here you can choose to accept the default directory or browse to a chosen location. Select Next to continue the configuration.

To finish configuration where neither the Web Service nor Report Service is to be configured see 5.13.

If EPM Web Service is to be configured see 5.11.

If Report Manager Server is to be configured where the Web Service is not to be configured see 5.12.

5.11Web Server Configuration Configuration of the Web Server used in EPM is dependent on the type of Web Server to be installed. There are currently two optional Web Servers which can be used in EPM, namely IIS or Business Objects’s propriety EPM software. The following steps are mainly similar whichever Web Server is to be used. There are two options presented:

• IIS Web Server Configuration

• EPM Web Server Configuration

To configure the IIS Web Service see 5.11.1


5|EPM Configure Web Server Configuration

To configure the IIS Web Proxy Service see 5.11.2

To configure the EPM Service see 5.11.3

5.11.1 IIS Web Server Configuration The Web Server should be configured as detailed below. First you must specify where the IIS ASP files are to be stored and the Web Server URL. The default destination will appear in the respective edit boxes on the screen.

The system account user must have full access to the EPM Temp directory in order to ensure temporary files are cleaned up correctly.

The machine’s IP address may be used here but this must also be used by Web Clients. Web Clients trying to access a Book using details alternate to those specified in this screen will not be allowed access (i.e. using the URL address instead of the IP address). When using IIS Web Server the IIS Web Files Directory should be specified as the standard IIS Directory. By default this is \inetpub\wwwroot\EPM. Read & Write access will be required to this directory. Once these are defined select Next to update the web files.

The IIS Web Server URL address should end in EPM.

Select Next to continue IIS web server configuration. Depending on the license options purchased there will be a number of choices available when configuring the type of security required to access books over the web. The default option is EPM Standard Security that requires each user to log into the EPM web server each time a book is accessed. The other options integrate EPM security with existing


EPM Configure Web Server Configuration |5

network security so that logging into the computer authenticates a user for access to EPM i.e. Single Sign On (SSO).

Selecting either EPM Standard Security or Windows NT Security options will require no further configuration. For details on the correct configuration of Windows Active Directory and LDAP Security see previous section 5.8. For an example of how to configure EPM to work with Web security see the EPM Administration & Security Guide.



The web files are then updated and a monitor bar displays progress. Once the bar is full select Next to complete configuration.

Where IIS is used as the Web Server please check the correct settings have been configured within IIS after the EPM Configure (see 5.11.4).

If Report Manager Server is installed see 5.12 to configure this option.

Otherwise to continue configuration see 5.10.

5.11.2 IIS EPM Web Proxy Service Configuration The following details an alternative method of connecting to the EPM web server when using a Proxy server. This method puts an extra bridge in the connection from the client software to the EPM Web Server. This is needed when a firewall is present on the system. A firewall makes connecting via DCOM much more difficult so the new ‘bridge’ uses TCPIP & HTTP to pass through the firewall. This facility is only available when using IIS as a Web Server. The proprietary EPM Web Server does not support the Web Proxy Service. The basic IIS Web Server configuration is identical to the process detailed in the previous section. The following section outlines the basic system architecture to use the EPM Web Proxy Service facility and how to configure the additional options in the EPM Web Server configuration screen.



5.11.2.1 SYSTEM ARCHITECTURE The system architecture should be something similar to below:

Internal Network The internal network will contain the Host IIS Web Server, which will connect to the primary EPM server in the normal manner.

DMZ This will contain the proxy IIS Web Server, which must have a 1 – 1 relationship with the Host IIS Web Server. Note: Where multiple proxy Web Servers are used each must connect to a corresponding host Web Server.

External Client This is the web user using Internet Explorer to connect to the URL of the Proxy IIS Web Server.



5.11.2.2 EPM WEB PROXY SERVICE CONFIGURATION The EPM configure utility now contains a ‘Use EPM Web Proxy Service’ option at the bottom of the EPM Web Server Configuration screen. This option should only be checked to configure a proxy Web Server for EPM.

The Host IIS Web Server should be configured in the usual manner for an EPM installation. Do Not check the EPM Web Proxy Service option in the EPM Web Server Configuration screen.

The Proxy IIS Web Server should have the EPM Web Proxy Service option checked in the EPM Web Server Configuration screen. Details on how to configure this are below:

• EPM Web Proxy Service Check Box: Click this if you wish to use the EPM Web Proxy Service on this Web Server.

• Proxy URL Edit Box: This should contain the location of the local web client software with ‘/tun’ added onto the end of the URL to use the EPM Web Proxy Service.

E.g. //YourMachineName/epo/tun

• Destination URL Edit Box: This should contain the address of the host IIS Web Server connecting to EPM.

E.g. //HostInternalEPMWebserver/epo

Note: It is possible to use an IP address when configuring the Proxy URL and the Destination URL but the user must use this IP address as the URL in the Internet Explorer web client rather than the DNS machine name.



When using the EPM Web Proxy Service extra ASP and graphics files are present after a web service installation. These are the files that are used by web clients and will appear in a sub directory (\TUN) under the default EPM WebFiles directory on the EPM Web Proxy Web Server.

5.11.2.3 WEB CLIENT ACCESS When using the EPM Web Proxy Service facility, the web client (using Internet Explorer) needs to add ‘/tun’ to the URL to access Books over the web. E.g. Where the proxy Webserver is called QATEST1 the user would type: http://qatest1/epo/tun

Select Next to continue IIS web server configuration. The web files are then updated and a monitor bar displays this progress. Once the bar is full, select Next to complete configuration.

Where IIS is used as the Web Server please check the correct settings have been configured within IIS after EPM Configure (see 5.11.4).

If Report Manager Server is installed see 5.12 to configure this option.

Otherwise to continue configuration see 5.10.


http://qatest1/epo/tun


5.11.3 EPM Web Server Configuration EPM Web Server is configured by specifying the port to be listened on, the temporary image directory and the Web Server URL to be used. EPM Configure will default to use a suitable available port but can be configured to use another.

The system account user must have full access to the EPM Temp directory in order to ensure temporary files are cleaned up correctly.

IMPORTANT: The EPM Web Proxy Service is not available when using EPM Web Service.

If you choose to use a port other than the default suggested (in this case 80), then this port number needs to be added after the EPM Web Server URL, preceded by a colon.

For Example: http://YourMachineName:82

where 82 is the alternative port required.

Additional ports to be used for the EPM Web Server must be operational in order to connect to Web Books successfully. If an invalid port is specified in EPM Configure you will not be able to successfully login to the application using the port.

Select Next to continue EPM web server configuration.

To configure EPM Report Manager Server if installed see 5.12.

To continue with configuration see 5.10.


http://YourMachineName:82


5.11.4 Post Installation: IIS Configuration In order to complete the installation of the EPM application you are required to configure Microsoft's Internet Information Server (IIS). To administer IIS it is necessary to have the 'IIS Admin Service' running (check Services in Control Panel to ascertain the current status of this service). To see the IIS properties associated with your EPM Application, select and expand the machine running your EPM Web server in the IIS Management screen. Right click on ‘Default Web Site’ or the virtual directory containing the EPM directory and choose ‘Properties’. The two most significant configuration settings for IIS are Anonymous Access settings (see 5.11.4.1) and IIS Timeouts (see 5.11.4.2). You must implement these settings to ensure your Web access operates correctly. Some special configuration options are required for Windows 2003, which uses IIS 6 (see 5.11.4.3). Additional options must be set for very large EPM models that use IIS 6 under Windows 2003 (see 5.11.4.4). By default the Web Files for your EPM Applications should be created in the directories at C:\Inetpub\wwwroot. It is advisable to stop and restart your IIS service to ensure that the changes become effective immediately. This can be done by selecting the context menu from the top node in IIS Manager and selecting Restart IIS. Your EPM web pages should now be available from your browser. You can check this by navigating to: http://yourwebservername/epo/about.asp where ‘YourWebServerName’ is the name of your EPM web server.

5.11.4.1 Anonymous Access Settings A user must then be defined for IIS Anonymous access. This can either be the default IIS guest account or a personally defined user with similar access rights. This user must have read / write access to the EPM directory and the EPM webfiles directory. Set a suitable password for this user. On a single machine environment the default IUSR_USER is normally sufficient. Next return to Internet Information Services Manager and select Properties from the right click context menu for Default Web Site. Select the Directory Security Tab and then choose Edit from the ‘Anonymous Access and Authentication Control’ area. In the Authentication Methods screen ensure that Anonymous access is checked and select Edit for the ‘Account Used for Anonymous Access’ option. In the Anonymous User Account screen define a windows account user. This can either be the default IIS Guest Access account or a personalized user on your PC. This user must have sufficient access to the EPM directory and web files (ensure this user is set up on the machine within Control Panel \ Computer Management \ Users and Groups). Set a password for this user in the box provided and ensure that ‘Allow IIS to control password’ is unchecked. These anonymous access rights are not required when using the EPM Web Proxy Service. The default IIS access provided is sufficient with this service, as it does not use COM security. When EPM is used with the DCOM transport layer then this account should be modified to use a Domain User account to allow the anonymous internet session to have sufficient privileges to have access to remote (i.e. distributed) services.

IMPORTANT: The user defined under anonymous access must be added to the DCOM settings of any primary and secondary model servers and web servers to allow users to login through the web to models based on alternative model servers.

These users must have access rights across the Domain in which the EPM system is installed.

5.11.4.2 Home Directory and Timeout Settings When a request for data or a book is sent to EPM, it may involve complex calculations that take time, before the response can be sent back to the web client. Due to this, it is essential that IIS timeouts be configured correctly to account for large processing times in your models.


http://yourwebservername/epo/about.asp


Right click on Default Web Site or the virtual directory containing the EPM directory and choose properties. On the Properties dialog box select the Web Site tab. Set the Connection Timeout to a time greater than you would expect any model requests / calculations to take.

Now select the Home Directory Tab as shown below.



The default access permissions of 'Read' and 'Scripts Only’ are sufficient to allow access to the EPM web files and can be left at these settings. To avoid possible COM surrogate errors the Application Protection option must be set to ‘High (Isolated)’ and default COM Security changed to include the IWAN_USER account (see 5.3.1). Now click on Configuration to set the Configuration options.



On the Configuration Options tab, set the ASP Script timeout to a time greater than you would expect any model requests / calculations to take.

5.11.4.3 Additional Windows 2003 When an IIS Web Server is installed on Windows 2003 additional options must be set.

• Using the Windows 2003 option pack Active Server Pages should be installed.

• Active Server Pages must also be selected. Start the Computer Management utility and select Internet Information Services and Web Service Extensions. Set Active Server Pages to ‘Allowed’.

• Once IIS is installed the option to “Run WWW Service in IIS 5.0 isolation mode” must be selected within Web Site Properties. Under Default Web Site the application protection setting should be set to High (isolated). These settings enable EPM Web pages to be displayed successfully.

5.11.4.4 Configuration for IIS 6 using Large EPM Models When viewing a book over the web all Dimension information and Alias information is transferred to the IE client when a model opens. For very large models, e.g. with hundreds of thousands of Dimension items, the IIS 6 configuration needs changing to accommodate these large transfers. NOTE: For the following change to take effect, Windows 2003 Server SP1 must be installed. For more information on the cause see Microsoft Hot Fix issue: 826756.



On a standard IIS 6 installation, the AspBufferingLimit is set to 4 MB. This value is too low for large EPM models and needs to be increased. The amount to increase by is dependant on the number of items in all the dimensions although there is currently no way to accurately determine a relationship. As a guide, a model with 500,000 dimension items operates correctly with a buffer limit of 400MB. You are advised to increase the limit until no further problems are encountered. If in doubt contact your Business Objects consultant. To change the IIS AspBufferingLimit:

1. Stop IIS using the Restart IIS option in the Internet Information Services Manager.

2. Edit the file C:\windows\system32\inetsvr\MetaBase.xml file using notepad.

3. Locate the option AspBufferingLimit=”xxxxxxx” where xxxxxxx is a numeric value.

4. Change to the new value and save the xml document.

5. Start ISS.

5.11.4.5 Multi Domain Environments In an environment where your web server is communicating across a domain to the application server you should use an account that has privileges that span the domain. The default IUSR account is specific to the web server machine and may not have the required domain privileges. Where several Web Servers exist on an EPM system, different domain users must be used to avoid a conflict of access permissions between the Web Servers. For a multi-domain environment you should consider an account that can span the domains and should ensure that the domains participate in a trust relationship.


5|EPM Configure Report Manager Server Configuration

5.12Report Manager Server Configuration Report Manager may be installed in conjunction with additional EPM components (e.g. Model Server, Web Server) on the same machine or may be installed with only EPM Core components. When configuring Report Manager Server you will be prompted to enter a network address for the Report Service to bind to. This should be the IP address or the DNS name of the machine the Report Manager Server is installed on. If you are installing Report Manager Client this screen will not appear. Enter the IP address in the edit box followed by a colon and a port number that is not currently being used. Once this format is satisfied the Add button will become active. Select Add and then Next to continue with the configuration of EPM.

5.12.1 Report Service Configuration Whether reinstalling Report Manager Server as an upgrade or installing for the first time, the network user account used when processing reports must be set in Services. This may be done either during installation or post installation. By default the Report Manager Service is associated with an inbuilt computer account, which will not have the required privileges to use a printer. In order to change this, click on the ‘Change’ button, which will open the services Administration window. Locate the Report Manager service, right click and select Properties. Within the Logon tab, set the account to This Account and browse to a network user account that has privileges to print from that machine. Enter and confirm the password for this account and apply these changes. The warning message will no longer be displayed and you should now be able to successfully print reports using Report Manager.


EPM Configure Finish Screen |5

To perform this configuration post-installation click on Start | Settings | Control Panel | Administrative Tools | Services, locate the Report Manager service and follow the steps above.

To continue with configuration see 5.13

5.13Finish Screen Assuming a successful connection the following screen is displayed. You are now advised that EPM has been successfully installed with a list of the installation options you have specified.

5.14EPM Book Viewer Configuration The configuration of EPM Book Viewer is initiated following the installation procedure described in 4.6.12. All that is required is to connect the Book Viewer client to the server, using the EPM Client Connection Wizard. You are requested to enter the name of the EPM Server or click Browse to search for the relevant server. (Refer to section 5.9.1 for further details.)


5|EPM Configure EPM Book Viewer Configuration

Select the ‘Configure DCOM Manually’ checkbox and then click Config DCOM if you wish to configure your DCOM now. Alternatively, you can complete the installation and perform this manually later. (Refer to section 5.3.1 for further details on DCOM Configuration.)

Select Next to continue to the Test Connection screen from which you can test your connection to the EPM Server (the Primary Model Server).


EPM Configure EPM Book Viewer Configuration |5

If connection is successful, you will be prompted to define a suitable folder for temporary files to be saved to. You need to ensure that members of the EndUser group have full Read / Write access to this folder. You can choose to accept the default directory or browse to a chosen location.

Select Next to continue to the Finish screen, which will give details of your successful connection. Press the Finish button to close the EPM Client Connection Wizard.


5|EPM Configure EPM Book Viewer Configuration


DCOM and Firewall Settings with EPM

6|DCOM and Firewall Settings with EPM Client Server Communication

6.1 Client Server Communication The Business Objects range of products uses a mechanism called DCOM to establish two-way communications (via TCP/IP) between the client software and server software.

EPM has a comprehensive security mechanism designed to control every aspect of a user’s access to the system. However, DCOM also contains authentication intended to limit communication between clients and servers to only authorized users. This extra authentication layer imposed by DCOM is somewhat redundant and can overcomplicate installation, as permissions need to be configured for EPM services.

Where the client workstation accesses the server through a firewall numerous extra ports have to be opened in the firewall to enable DCOM authentication to take place. By removing DCOM authentication and implementing COM Internet Services (CIS) then DCOM communications can be reduced to a single port.

Disclaimer: this suggested configuration may have negative effects for a client workstation accessing other servers, which have not been reconfigured to use CIS. After reconfiguring your client workstation to communicate with the Business Objects application server, your workstation may not communicate properly on other servers in the network.

6.2 Configuring EPM servers and clients to communicate without DCOM

The following section describes the process of removing DCOM from a client-server setup where the client is installed on Windows 2000 Professional that belongs to a workgroup called “workgroup”. The user is logged on as a standard user accessing the EPM server software running on a Windows 2003 Server in a domain called “domain.local”.

The client workstation is connected to the LAN via a hardware firewall whilst the domain controller, DNS server and EPM server are all behind a firewall in a DMZ.

The removal of DCOM authentication should ideally be done before any system goes live. However if these changes need to be applied to a production environment then you must ensure that all users are logged out of EPM and that all models have closed down before starting.

It is possible to confirm that the EPM services have automatically stopped by inspecting the status of the services in EPM Service Manager. This is accessed from Start | Programs | Business Objects | Tools | EPM Service Manager.


DCOM and Firewall Settings with EPM Configuring EPM servers and clients to communicate without DCOM |6

6.2.1 Server Configuration for Windows 2003 Launch the DCOM Configuration utility using the Start | Run option and enter “dcomcnfg” in the text box then press the “OK” button. The following dialog box will open:

Expand the “Components Services” by pressing the “+” sign to the left then expand “Computers”, and “My Computer” and finally click on the “DCOM Config” folder.

In the right hand pane select the “EPMServer” COM object and from the right click menu select “Properties”. On the “General” tab change the “Authentication Level” to “None” using the drop-down box.


6|DCOM and Firewall Settings with EPM Configuring EPM servers and clients to communicate without DCOM

Under the “Security” tab set the “Access” and “Launch Permissions” radio buttons to Customize.


DCOM and Firewall Settings with EPM Configuring EPM servers and clients to communicate without DCOM |6

In the “Launch Permissions” group box click the “Edit…” button then use the “Add...” button to add the “ANONYMOUS LOGIN” group and set its “Launch Permission” to “Allow”.


6|DCOM and Firewall Settings with EPM Channeling all DCOM communications through a single port

Next, in the “Access Permissions” group box press the “Edit…” button then use the “Add...” button to add the “Everyone” group and set its “Access Permission” to “Allow”.

At the properties dialog box press the “OK” button to return to the “Component Services” application dialog box.

Repeat these steps for both the COM objects “EPMMain” and “EPMModel”. When complete restart the server or restart the “EPMServer”, “EPMMain” and “EPMModel” services.

6.3 Channeling all DCOM communications through a single port

All DCOM communications can be channeled through port 80 using the HTTP protocol. This is achieved by configuring COM Internet Services (CIS) to keep the number of paths through a firewall to a minimum.

The following section describes the process of channeling all DCOM communications through a single port in client-server setup where the client is installed on Windows 2000 Professional and accesses an EPM server running Windows 2000 Server software.

The client workstation is connected to the LAN via a hardware firewall whilst the domain controller, DNS server and EPM server are all behind a firewall in a DMZ.

6.3.1 Client configuration for Windows 2000


DCOM and Firewall Settings with EPM Channeling all DCOM communications through a single port |6

Support for COM Internet Services is included in Windows 2000. To enable CIS for a client you need to add the tunneling TCP protocol to the DCOM protocols list launch “DCOMCNFG” utility from the run option (see section 6.2.1)

Select the “Default Protocols” tab and use the “Remove” button to remove all protocols. Use the “Add” button to add “Tunneling TCP/IP”. Select the “Default Properties” tab and enable “Enable COM Internet Services on this computer”. The client will need rebooting before the changes take effect.

6.3.2 Server configuration for Windows 2000

On the Windows 2000 Server, CIS requires that the Internet Information Server (including the IIS Manager) is installed and working. CIS should not be installed on a server running Microsoft Proxy Server because these two services are incompatible and will not work correctly together.

If your server is multi-homed i.e. has a network card with two or more IP addresses then you must ensure that the EPM client software is configured to refer to the server by its DNS name and not one of its IP addresses.

From the Control Panel, select “Add/Remove Programs” and click “Add/Remove Windows Components”. Click the “Components” button to start the wizard. Select “Networking Services” and click the “Details” button.


6|DCOM and Firewall Settings with EPM Channeling all DCOM communications through a single port

Select the “COMM Internet Services Proxy” check box and click OK.

As for the client, enable Tunneling TCP/IP by running DCONCNFG (see section 6.2.1). Select the “Default Protocols” tab and use the “Remove” button to remove all protocols.

Use the “Add” button to add “Tunneling TCP/IP”. Select the “Default Properties” tab and enable “Enable COM Internet Services on this computer”. The client will need rebooting before the changes take effect.


DCOM and Firewall Settings with EPM Firewall Configuration for EPM |6

6.4 Firewall Configuration for EPM The table details the recommended firewall configuration required to allow the successful installation and operation of EPM in a typical client- server setup.

Nº Description Type Port(s) LAN> >DMZ

DMZ> >LAN

1 DNS TCP/UDP 53 Y Y 2 Echo Reply ICMP 0 Y Y 3 Destination Unreachable ICMP 3 Y Y 4 Source Quench ICMP 4 Y Y 5 Redirect ICMP 5 Y Y 6 Echo ICMP 8 Y Y 7 Router Advertisement ICMP 9 Y Y 8 Router Solicitation ICMP 10 Y Y 9 Time Exceeded ICMP 11 Y Y

10 NetBIOS NS TCP/UDP 137 Y Y 11 NetBIOS DGM TCP/UDP 138 Y Y 12 NetBIOS SSN TCP/UDP 139 Y Y 13 SMB TCP 445 Y Y

14 Kerberos UDP 88 Y Y 15 LDAP UDP 389 Y Y

16 HTTP TCP 80 Y Y

1 (DNS)

This is used by the installation process of the EPM client software to determine whether it can resolve the EPM server name just prior to issuing a ping to test whether it can communicate with the server computer itself. Also the process of the client workstation actually logging on to the domain and DCOM itself uses DNS lookups.

2-9 (ICMP)

The installation process for the EPM client software pings the named EPM server to test communications with the server.

10-13 (NetBIOS/SMB)

This is the main set of services use by a client computer to access server resources like shares etc… These services are also used during the logon process.

14-15 (Kerberos/LDAP)

These services are used during the logon process to locate user and computer objects and authenticate the workstation to the domain.

16 (HTTP)

This is the protocol used by CIS to channel all ports for the client-server software in EPM to communicate using DCOM over a TCP/IP network. The DCOM Dynamic ports usually cover the range 1024-65535 by default; however CIS channels all of this traffic through port 80.

Network Address Translation is not allowed

You must ensure that the IP address used by the client application to contact the server is the actual IP address bound to the network card of the server. In other words, the firewall must not perform network address translation on the servers IP address, as this will stop DCOM communications from working.


6|DCOM and Firewall Settings with EPM Limiting DCOM Dynamic Ports to 5000-5200

Whilst you may be able to PING successfully DCOM will not work.

6.5 Limiting DCOM Dynamic Ports to 5000-5200 To limit the ports used by DCOM Dynamic to 5000-5020 on the Windows 2000 Server operating system you will need to modify the registry as follows:

Open the registry editor by running the REGEDT32 utility from either a command prompt or by selecting Run from the Start menu and typing the command into the text box.

Do not use REGEDIT utility, as this does not support the registry modifications required.

Within the Registry Editor window expand the “HKEY_LOCAL_MACHINE” window to full.

Navigate to “Software\Microsoft\Rpc” and using the options under the Edit menu, create the key “Internet” under the “Rpc” key. Inside that key create three new values as follows:

Name Type Value Ports REG_MULTI_SZ 5000-5020 PortsInternetAvailible REG_SZ Y UseInternetPorts REG_SZ Y

The “Ports” value “5000-5020” makes only these ports available to DCOM dynamic communications. This is the recommended minimum value because Windows itself and other applications will also use DCOM. For this reason it’s impossible to state exactly the minimum number of ports that should be configured.

As a rule of thumb if you experience problems as a result of these changes then the range should be increased from 5000-5020 to 5000-5030 or more as required. However don’t forget to also increase the range configured in the firewall’s Allow rule to match any increases in range.


DCOM and Firewall Settings with EPM Limiting DCOM Dynamic Ports to 5000-5200 |6

Disclaimer: this configuration may have negative effects for a client workstation accessing other servers, which haven’t been reconfigured to use CIS. After reconfiguring your client workstation to communicate with the Business Objects application server, your workstation may not communicate properly on other servers in the network.


6|DCOM and Firewall Settings with EPM Limiting DCOM Dynamic Ports to 5000-5200


Checking the Installation

7|Checking the Installation Basic Checking

7.1 Basic Checking Note: If login security is configured to use Single Sign On (SSO) then the Login dialog screen will not appear when any EPM application is opened.

In order to work, SSO requires that an EPM login is created that exactly matches a users NT, Active Directory or LDAP login (see Administration and Security Guide for more details). As these EPM logins do not exist in a newly installed system, when first logging in as the administrator, the user must bypass the SSO security. To achieve this, open Model Builder and cancel the error message. To then open the Login dialog screen hold down the Shift key and click on the login icon on the tool bar or use the keyboard combination of Ctrl, Shift and L. Then enter the predefined administrator login and password and click OK (see below). One of the first tasks is then to create the EPM logins to allow other users to login.

Click on the Model Builder icon from Start | Programs | Business Objects | EPM to launch the application. The Login dialog screen will be displayed as shown below:

Enter your administrator user name and password.

Note: EPM applications have a pre-defined administration user called “Administrator” with the default password “administrator”. You are strongly advised to change this password after logging in as Administrator for the first time. A special function called Change Password is provided under the Tools menu specifically for this purpose.


Checking the Installation Basic Checking |7

The initial EPM screen will appear with a blank Model Selection box as below.

Select Model Admin to be taken to the model management screen where you can create your first Model. In the Model Administration screen select New.

Give your Model a name and if required a description and click OK.

Your newly created Model will appear on the Administration tab and can be opened by double clicking on it or by selecting it and clicking the Open button.


7|Checking the Installation Basic Checking

The main EPM Application screen is now displayed. You should now set up some of your Users and Groups before proceeding any further with your Model. Information on setting up security permissions and model administration is detailed in the Administration and Security Guide.


Removing the Software

8|Removing the Software Use Remove Programs

8.1 Use Remove Programs Before removing the EPM Suite you should ensure that:

• All users have logged out of EPM applications (using EPM Monitor)

• All the EPM services have been stopped (using EPM Service Manager).

The software can be removed by the use of the uninstall program, accessed from Add/Remove Programs in Control Panel.

Select the EPM Application you want to remove and click the Change/Remove button. You will see a dialog similar to the one that follows, which demonstrates the removal of EPM.


Removing the Software Use Remove Programs |8

You are then asked to confirm your intention in the next screen. Select Finish to progress with the uninstall.

A progress screen will appear:


8|Removing the Software Use Remove Programs

During the removal of your EPM Application you will be asked whether you want to remove the Business Objects shared components. These are the files stored in Program Files \ Common Files \ Armstrong Laing which include the Business Objects language editor and EPM Configure utility. It is advisable to remove the files that are no longer required as they will be reinstalled on the next EPM installation.

Caution: The Metify application provided by Business Objects shares some of the same components as Activity Analysis. If you remove these at this stage Metify will no longer work. These components can be restored by a re-install of either Metify or Activity Analysis. If you choose not to remove these components Metify is unaffected.

Once your EPM Application has been successfully uninstalled, you MUST restart your machine to complete the process. If you do not restart your machine between removing the software and installation the following error message will pop up.

Note: Do not simply delete the directories containing the EPM files.


Tips for a Smooth Installation

9|Tips for a Smooth Installation Preparation

9.1 Preparation Preparation is all-important. You should make sure before you begin that you have carried out the following tasks. Time spent here may well save you trouble later.

• Evaluate the network environment in place at your site. Make sure you understand the primary domain, shares, routers etc.

• Ensure that you have the necessary user names and passwords.

• If the client and server are on different NT domains, an NT trust relationship has to be established. Contact your NT Administrator for assistance.

• Establish that clients can see the EPM Server through their normal logons. You can do this by logging on as the client, and then checking that your machine can see the EPM server via “Network Neighborhood”.

• Make sure that you have your EPM serial number(s) before starting.

• If at all possible, be able to contact a Network Administrator.

9.2 General Tips The following are general tips that will help the installation go smoothly, or make maintenance easier in the future:

• Install the software in the order recommended in Section 4 EPM Installation.

• Ensure your first client machine is installed correctly before moving on to the other clients. This will make sure that any installation problems are dealt with once, rather than once for each client.

9.3 System Administration Please refer to the EPM Database User Guide for Oracle or the EPM Database User Guide for Microsoft SQL Server (depending on your installation) for further advice on system setup. However, please note the following points:

• Ensure you have adequate database housekeeping procedures in place, as log files (especially transaction logs) can grow very large which can cause adverse effects on the performance of EPM.

• It is recommended that the models directory where the ModelRes.EPM files are created is added to the list of virus checking exclusions, as many temporary files are created here when the system is running. These files are updated several times and the virus checker would then continue checking these files if left switched on, thus affecting performance.

9.4 Networking Advice The following are common problems, mostly associated with network issues, which may cause difficulties with an EPM installation:

• NT security requires you to log on to the primary domain in order to access its resources. If you don’t log on to the primary domain, you will not be able to run EPM.

• The domain that the client logs onto must be trusted with the EPM server domain.

• Networking must be configured correctly on the EPM server. Without this, the clients will not be able to see the server.


Tips for a Smooth Installation Web Client Deployment |9

• Remember that, under NT, the software is installed under an Administrator user, but usually run on the client by a normal user. When you carry out a test following the install, you should no longer be logged on as the Administrator.

9.5 Web Client Deployment If you intend to deploy an EPM application to remote web users then there are some vital pieces of information that you will need to consider to ensure that the deployment goes as smoothly as possible. The EPM web client uses Microsoft’s ActiveX technology to provide web users with an EPM logon panel within their Internet Explorer browser. With each release of the EPM Suite comes a new version of the signed ActiveX control ‘EPMDataConnection Control’ which will be placed into the ‘Downloaded Program Files’ folder. There are two alternative methods for installing the EPM ActiveX toolbar object:

• Web Download

• Web Client Installer Program

9.5.1 Web Download By default Internet Explorer permits the downloading of signed ActiveX controls. This level of security allows Armstrong Laing to deploy new versions of the control without any intervention required by the web user. Some organizations have stricter security policies that modify the default Internet Explorer security settings and this can affect the downloading of the control. If security is set to ‘High’, or signed ActiveX downloads are set to ‘Disable’, then the control will not download the newer version and the web user will be unable to log onto the system. The best method of resolving this problem is to add your web server’s address into the list of Trusted Sites.

NOTE: Local administrator rights are required to effect any changes to Internet Explorer settings. If you do not have local administrator access you will not be able to download the ActiveX control if your current settings do not permit such downloads.


9|Tips for a Smooth Installation Web Client Deployment

To add your web server to the list of trusted sites: 1. Open Internet Explorer and choose Tools | Internet Options.

2. Select the Security tab and click on the Trusted Sites icon.

3. Click on the Sites… button to open up the list of trusted sites.

4. Type the name of your web server(s) and click Add to add it to the list.

5. If the checkbox ‘Require server verification…’ is checked then uncheck it unless your web server address begins ‘https:’ denoting a secure site.

6. Click on the OK button to confirm your setting changes.

9.5.2 Web Client Installer Program The Web Client Installer program is designed for use by System Administrators. It provides a means of installing the EPM ActiveX web toolbar object without the necessity for the installation to be performed by the client from within the web browser. There are several benefits to using the installer program instead of the web download method. These are:

The installation can be automated using a method such as Microsoft's System Management Server. This type of program can also distribute the executable to all the EPM clients at a convenient time.

The client machine can be updated with the correctly-versioned control before requiring access to the EPM web books, thus reducing inconvenience.

A centrally-controlled roll-out of the installation will ensure that there is consistency of software versions amongst the client community.


Tips for a Smooth Installation Web Client Deployment |9

To install the program on the client, simply run the executable WebViewerSetUp.exe that is located in the 'Additional Installers' directory on your current EPM software CD. No reboot of the client is required after installation.


9|Tips for a Smooth Installation Web Client Deployment


Troubleshooting

10|Troubleshooting EPM System Information

10.1EPM System Information To assist you with determining the current status of your EPM system you should use the EPM System Information tool (Programs | Business Objects | Tools). This tool provides many features for monitoring and controlling the EPM services, users and models. In addition, this tool is useful for providing information to Business Objects Helpdesk should you need to do this.

The main features of this tool are:- • Provides a summary of the server

• Checks pre-requisites are correct

• Monitors current users and the models they are logged in to

• Checks EPM settings (including file versions, logs, serial numbers and DCOM settings)

• Monitors the status of EPM services and processes

• Gets information about EPM models (dimension statistics and value combinations)

All of this information can be encapsulated in a summary or detailed report which can then be retained or may be requested by Business Objects Helpdesk for troubleshooting configuration and performance issues.

10.2EPM Error Messages The following are some of the most common installation and configuration problems that you may encounter. Details on the likely cause and actions needed to solve the problem are included with each message.


Troubleshooting EPM Error Messages |10

10.2.1 Incorrect EPM Support Version

This error occurs at installation on a Client PC when a different version of EPM is being installed to that installed on the server. To rectify this click OK and then click Cancel from the “Test Connection to EPM Main Server” screen and the click Finish. EPM should then be uninstalled using Add/Remove Programs from Control Panel and then reinstalled using the correct version.

10.2.2 RPC server is unavailable

This error occurs at installation when the client tries to access a server that is unavailable. This could mean that either the server name is incorrect or that the server cannot be accessed. To rectify this click OK on the error message and then click Back to return to the EPM Client Setup screen. Check that the server name is correct. If the server name is correct, check that the server is visible within Network Neighborhood. If it is not visible, check the server and network connections. Incorrect DCOM configuration may also be a factor. Check DCOM has been set up successfully on all Servers required.

10.2.3 Class Not Registered The ‘Class Not Registered’ Error message may appear after logging in to EPM. You may be able to see models in the Model Selection screen but will not be able to open them. This could be due to one of the reasons outlined below:

Different versions of EPM are installed on the same machine (i.e. AA & PP have different Build numbers).

There is no EPM Server installed on the machine, only Model servers are present (PP or AA) or the EPM Server is a different Build to secondary servers.

There is no installation of the required application but EPM Server exists (e.g. a PP client trying to talk to an EPM Server that does not have PP installed but has AA present).


10|Troubleshooting EPM Error Messages

10.2.4 File Name doesn’t start with %PDF This error can occur on the Web client when trying to view a pdf. This is normally due to the anonymous access account in IIS allowing IIS to control password (see 5.11.4.1).

10.2.5 COM Surrogate Errors These errors can occur if you have neglected to set the Application Protection option under IIS Default Web Site properties to ‘High (Isolated)’.

10.2.6 Connection Problems

10.2.6.1 Windows Client Access Problems An Access violation error can occur when an EPM client attempts to connect to the Model Server after a full installation and configuration. This error appears for a variety of reasons but is generally caused by the inability of the client to connect successfully to the Model Server. If this error appears it is advisable to consider the possibilities outlined below and follow the appropriate steps for each respective problem. After an Initial Installation: If you receive this error message after an initial installation and configuration, check that the model server is running and that the DCOM settings have been configured correctly. The machine that you are attempting to connect from should be included in the DCOM access and launch settings for EPMMain (depending on the application running) and for EPMServer. This setting can be either individuals or an NT Domain group that has been granted suitable permissions. EPM has previously been successfully installed and accessed: If you have previously been using EPM successfully but suddenly receive this ‘Access Violation’ you should check whether the EPM Model Server is currently running and available. If the server is not available then reboot the server to allow users to connect. If the server is apparently running successfully and other users can connect, running EPM Configure on the Client machine in question should reconnect to the server once more and allow you to continue working.

10.2.6.2 No such interface supported When using the Sockets method of Communication Transport, an error situation may be generated if the IP filter settings are too restrictive. The message “No such interface supported” will appear if the server is unable to provide the requested communication.

The message may appear as above, when unable to start an application, or alternatively it may appear once an application has been opened that is unable to carry out an operation. To rectify the situation, check the rules that have been defined in Advanced IP Filtering, to ensure that they don’t block any IP services from that address.



10.2.7 Web Client Access Problems An Access Violation error may occur when trying to log in as a Web Client if the Web Server has not been configured with sufficient security privileges. This could be due to several reasons outlined below: DCOM Security permissions set on all Servers Where EPM components are spread across several Servers, DCOM must be configured to allow User access across all these machines. All users within the network domain who wish to access EPM must be added to the DCOM security settings on all the Server machines (this can be either individual users or user groups).

IIS Anonymous User Security The user defined under Anonymous User authentication security does not have sufficient security privileges. It is advisable to choose a user within the network domain who has read / write access on the Web Server machine. If problems persist check this user is set up within the DCOM Settings on the other Servers the Web Server communicates with.

10.2.7.1 Access Denied This error may occur when trying to access the default Web Book using the Web Client. It appears within the details accessed through a yellow warning icon to the bottom left of Internet Explorer. This may be caused by an incorrect web address being used, namely an IP address was defined with the Web Server configuration screen but the address used by the Web Client is a machine name. Try entering the alternate address used for the Web Server to login to EPM. Alternatively this may be caused when more than one Web Server exists on an EPM system but the same IUSR account is used within Internet Information Services. Where several Web Servers exist, different domain users must be used in IIS to avoid a conflict of access permissions between the Web Servers.

10.2.8 Multiple User Web Connection Problems If problems tend to occur when lots of users access web pages at the same time it may be due to problems loading and unloading the required DLL on the Web Server. This problem may manifest itself in various ways but the most common are “Web Page Unavailable” or general CPU lock ups on the Web Server machine. To rectify the problem certain DLL’s should be registered to keep them loaded in memory longer. For more information on this process please contact Business Objects.

10.2.8.1 Web Page Unavailable This can occur if using IIS as a Web Server after EPM has been installed. A web user will not see the EPM banner page and this standard IIS error will be displayed. To solve this problem check that the web files are stored in the default IIS folder (this is often \inetpub\wwwroot\) by using EPM Configure. If an EPM folder does not exist under this path then you may need to create an EPM subfolder in which to store the files.

File Structure If IIS was not installed before the installation of EPM, a virtual directory will need to be created in order to access the web files created during installation (usually underneath the default root directory) on IIS. To access the IIS configuration program open the Control Panel and select Administrative Tools \ Internet Services Manager



Select the 'Default Web Site' node and select New \ Virtual Directory from the right-click context menu. This will evoke the Virtual Directory Creation Wizard. When prompted to supply an alias name for the directory type "EPM”.

Report Server Configuration If Report Server is installed but a port number is used in the configuration that is currently in use by some other application then EPM web pages may not be accessed. Port 80 should particularly be avoided in this case. Changing the port number in the Report Server configuration screen to a free port should allow access to EPM Web Books.

10.2.8.2 Connection Closed Gracefully This error may appear when trying to login to the Web Client and is generally caused by configuration issues. Check the Web Server settings are correct as defined in the EPM Configure section.



Business Objects Information Resources

A1. Documentation and information services Business Objects offers a full documentation set covering its products and their deployment. Additional support and assistance are also available to help maximize the return on your business intelligence investment. The following sections detail where to get Business Objects documentation and how to use the resources at Business Objects to meet your needs for technical support, education, and consulting.

• Documentation • Customer support, consulting and training • Useful addresses at a glance

A2. Documentation You can find answers to your questions on how to install, configure, deploy, and use Business Objects products from the documentation.

What’s in the documentation set? View or download the Business Objects Documentation Roadmap, available with the product documentation at http://www.businessobjects.com/support/ . The Documentation Roadmap references all Business Objects guides and lets you see at a glance what information is available, from where, and in what format.

Where is the documentation? You can access electronic documentation at any time from the product interface, the web, or from your product CD.

Documentation from the products Online help and guides in Adobe PDF format are available from the product Help menus. Where only online help is provided, the online help file contains the entire contents of the PDF version of the guide.


http://www.businessobjects.com/support/


Documentation on the web The full electronic documentation set is available to customers on the web from support web site at: http://www.businessobjects.com/support/ .

Documentation on the product CD Look in the docs directory of your product CD for versions of guides in Adobe PDF format.

Send us your feedback Do you have a suggestion on how we can improve our documentation? Is there something you particularly like or have found useful? Drop us a line, and we will do our best to ensure that your suggestion is included in the next release of our documentation: [email protected]. Note: If your issue concerns a Business Objects product and not the documentation, please contact our Customer Support experts. For information about Customer Support visit: http://www.businessobjects.com/ support/ .

A3. Customer support, consulting and training A global network of Business Objects technology experts provides customer support, education, and consulting to ensure maximum business intelligence benefit to your business.

How can we support you? Business Objects offers customer support plans to best suit the size and requirements of your deployment. We operate customer support centers in the following countries:

• USA • Australia • Canada • United Kingdom • Japan

Online Customer Support The Business Objects Customer Support web site contains information about Customer Support programs and services. It also has links to a wide range of technical information including knowledgebase articles, downloads, and support forums. http://www.businessobjects.com/support/

Looking for the best deployment solution for your company?

Business Objects consultants can accompany you from the initial analysis stage to the delivery of your deployment project. Expertise is available in relational and multidimensional databases, in connectivities, database design tools, customized embedding technology, and more.



mailto:[email protected]

http://www.businessobjects.com/



For more information, contact your local sales office, or contact us at: http://www.businessobjects.com/services/consulting/

Looking for training options? From traditional classroom learning to targeted e-learning seminars, we can offer a training package to suit your learning needs and preferred learning style. Find more information on the Business Objects Education web site: http://www.businessobjects.com/services/training


http://www.businessobjects.com/services/consulting/

http://www.businessobjects.com/services/training


A4. Useful addresses at a glance

Address Content

Business Objects product information http://www.businessobjects.com

Information about the full range of Business Objects products.

Product documentation http://www.businessobjects.com/ support

Business Objects product documentation, including the Business Objects Documentation Roadmap.

Business Objects Documentation mailbox [email protected]

Send us feedback or questions about documentation.

Online Customer Support http://www.businessobjects.com/ support/

Information on Customer Support programs, as well as links to technical articles, downloads, and online forums.

Business Objects Consulting Services http://www.businessobjects.com/ services/consulting/

Information on how Business Objects can help maximize your business intelligence investment.

Business Objects Education Services http://www.businessobjects.com/ services/training

Information on Business Objects training options and modules.


http://www.businessobjects.com


mailto:[email protected]




C

Index A

Advanced IP Filtering, 55

Catalog, 52, 54 Checking the Installation, 100 Connectivity, 51

D

Data Source, 52, 54 Database Auditing

Selection, 60 Database Connectivity, 51 Database Provider, 52, 54 Database setup

OCI, 53 OLEDB, 52 Oracle Instant Client, 53

DCOM and Firewall Settings with EPM, 88 DCOM Configuration

Workflow, 48

E

EPM Architecture, 8 EPM Configuration, 40 EPM Installation, 24 EPO Configure

Client Setup, 66 Configuration Options, 40 EPO Logfile Location, 69 EPO Server Configuration, 50 EPO Web Server Configuration, 76 Finish Screen, 83 IIS Web Proxy Service Configuration, 72 IIS Web Server Configuration, 70 Report Manager Server Configuration, 82 Server, 42 Work Manager Client Configuration, 49 Work Manager Installation Type, 48 Work Manager Server Options, 63

EPO Server Database setup, 52 Installation Type, 42 Model Server only, 43 Primary EPO Server, 42

EPO Server Configuration, 42 EPO System Information, 114

F

Firewall Configuration, 95

H

Housekeeping, 108


I

IIS Configuration Post Installation, 77

Installation General Tips, 108

Installation Order, 26 Installation Process, 27 Installation Tips

Preparation, 108 Introduction, 6 IP Filter

Defining rules, 56 Rule ordering, 57

L

License key Configuration, 59

M

Model Directory Selection, 58

N

Networking Advice, 108

O

OCI, 51 OLEDB, 51 Oracle Instant Client, 51

P

Port Changing the assigned port, 57

Preparation, 14 Topologies, 16

R

Removing the Software, 104

S

Server component registration, 61 Service Name, 52, 54 System Components, 9

Client applications, 10 Data Bridge, 11 Database Server, 9 EPO Server, 9 Model Server, 9 Report Manager Client, 10 Report Manager Server, 10 Utilities, 10 Web Client, 10


Index

Web Service, 9 VWork Manager Client, 11 Work Manager Server, 11 Virus checking, 108

WT Web Client Deployment, 109 Topologies, 16 Web Client Installer Program, 110 Troubleshooting, 114 Web Download, 109 Workflow DCOM Configuration, 48


epm installation guide en

Documents